YARA unknown stable yara

possible_exploit [maldocs]

View Source

Detection Logic

$magic in (0..1024) and (2 of ($attrib*)) or ($action0 and #shell > 10 and 1 of ($cond*)) or ($action1 and $cond0 and $nop)

Field Validations

Loading…

Comments (0)

Loading comments...