Signature Base unknown stable yara

SUSP_JS_Dropper_Mar26 [yara]

Detects suspicious JavaScript dropper used in plain-crypto-js supply chain attacks

View Source

Detection Logic

filesize < 10KB
      and all of ($sa*)
      and 2 of ($sb*)

Field Validations

Loading…

Comments (0)

Loading comments...