Signature Base unknown stable yara

apt_nix_elf_derusbi_kernelModule [yara]

Detects Derusbi Backdoor ELF Kernel Module

View Source

Detection Logic

uint32(0) == 0x464c457f and all of them

Field Validations

Loading…

Comments (0)

Loading comments...