Signature Base unknown stable yara

hatman_payload [yara]

Detects Hatman malware

View Source

Detection Logic

( hatman_memcpy and hatman_origcode and hatman_mftmsr ) and not ( hatman_origaddr and hatman_loadoff )

Field Validations

Loading…

Comments (0)

Loading comments...