YARA-Regeln mit dem Tag DOWNLOAD
4 Regeln tragen den Tag „DOWNLOAD“.
- SECUINFRA_SUSP_Discord_Attachments_URLNur Metadaten
Detects a PE file that contains an Discord Attachments URL. This is often used by Malware to download further payloads
Verdächtig / HuntingSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-02-19 - SECUINFRA_SUSP_Powershell_Download_Temp_RundllNur Metadaten
Detect a Download to %temp% and execution with rundll32.exe
Verdächtig / HuntingSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-09-02 - SECUINFRA_SUSP_Powershell_Download_Temp_Rundll_1Nur Metadaten
Detect a Download to %temp% and execution with rundll32.exe
Verdächtig / HuntingSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-09-02 - SECUINFRA_SUSP_DOTNET_PE_Download_To_SpecialfolderNur Metadaten
Detects a .NET Binary that downloads further payload and retrieves a special folder
Verdächtig / HuntingSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-02-27