YARA unknown stable yara

Petya_Ransomware [malware]

Detects Petya Ransomware

View Source

Detection Logic

uint16(0) == 0x5a4d and filesize < 500KB and $a1 and 3 of ($s*)

Field Validations

Loading…

Comments (0)

Loading comments...