YARA-Regeln für Konni

Script used to performs check before executing Konni

Detects Konni dropper used when distributed via malicious document

Detect the CAB files used to drop the KONNI malware

Detect the BAT files (named trap.bat or yup.bat) used by KONNI

Detect the KONNI RAT DLL files (x32 and x64)

Rule based on structure offsets and file extension

Rule based on structure offset and file extension

Konni payload