YARA unknown stable yara

MALW_TinyShell_backconnect_ELF [malware]

View Source

Detection Logic

is__elf
    and priv01
    and ((priv02)
      or ((priv03)
        or (priv04)))
    and filesize < 100KB

Field Validations

Loading…

Comments (0)

Loading comments...