Signature Base unknown stable yara

MAL_Backdoor_May26 [yara]

Detects a backdoor smuggled into signed DAEMON Tools binaries via supply-chain compromise, receives encrypted commands over HTTPS to execute arbitrary shell commands and drop files on victim hosts.

View Source

Detection Logic

all of them

Field Validations

Loading…

Comments (0)

Loading comments...