YARA-Regeln für Amadey

This rule detects intrinsic patterns of Amadey version 5.34

Finds Amadey's clipper plugin based on characteristic strings

Finds standalone samples of Amadey based on characteristic strings

Finds Amadey's stealer plugin based on characteristic strings

autogenerated rule brought to you by yara-signator

Detects password stealer DLL. Dropped by Amadey

Detects screenshot stealer DLL. Dropped by Amadey

Detects Amadey executables with specific email addresses found in the code signing certificate

Amadey Payload