Signature Base unknown stable yara

WaterBug_wipbot_2013_core_PDF [yara]

Symantec Waterbug Attack - Trojan.Wipbot 2014 core PDF

View Source

Detection Logic

uint32(0) == 0x46445025 and #a > 150 and #b > 200

Field Validations

Loading…

Comments (0)

Loading comments...