Signature Base unknown stable yara

apt_nix_elf_Derusbi_Linux_SharedMemCreation [yara]

Detects Derusbi Backdoor ELF Shared Memory Creation

View Source

Detection Logic

uint32(0) == 0x464C457F and any of them

Field Validations

Loading…

Comments (0)

Loading comments...