YARA unknown stable yara

Maldoc_APT10_MenuPass [maldocs]

Detects APT10 MenuPass Phishing

View Source

Detection Logic

any of them or
      hash.md5(0, filesize) == "4f83c01e8f7507d23c67ab085bf79e97" or
      hash.md5(0, filesize) == "f188936d2c8423cf064d6b8160769f21" or
      hash.md5(0, filesize) == "cca227f70a64e1e7fcf5bccdc6cc25dd"

Field Validations

Loading…

Comments (0)

Loading comments...