YARA unknown stable yara

WaterBug_wipbot_2013_core_PDF [malware]

Symantec Waterbug Attack - Trojan.Wipbot 2014 core PDF

View Source

Detection Logic

($PDF at 0) and #a > 150 and #b > 200

Field Validations

Loading…

Comments (0)

Loading comments...