YARA unknown stable yara

hancitor_dropper [maldocs]

View Source

Detection Logic

uint32be(0) == 0xD0CF11E0 and all of ($api_*) and $magic

Field Validations

Loading…

Comments (0)

Loading comments...