YARA unknown stable yara

SHIFU_Banking_Trojan_1 [malware]

Detects SHIFU Banking Trojan

View Source

Detection Logic

uint16(0) == 0x5a4d and ($x1 or 5 of ($s*))

Field Validations

Loading…

Comments (0)

Loading comments...