YARA unknown stable yara

WannaCry_Ransomware [malware]

Detects WannaCry Ransomware

View Source

Detection Logic

uint16(0) == 0x5a4d and filesize < 10000KB and ( 1 of ($x*) and 1 of ($s*) or 3 of ($op*) )

Field Validations

Loading…

Comments (0)

Loading comments...