YARA-Regeln mit dem Tag INKYSQUID
3 Regeln tragen den Tag „INKYSQUID“.
The BLUELIGHT malware family. Leverages Microsoft OneDrive for network communications.
APT / AkteurSignature Base (Florian Roth / Nextron)· threatintel@volexity.com· 2021-04-23Python Loader used to execute the BLUELIGHT malware family.
APT / AkteurSignature Base (Florian Roth / Nextron)· threatintel@volexity.com· 2021-06-22The DECROK malware family, which uses the victim's hostname to decrypt and execute an embedded payload.
APT / AkteurSignature Base (Florian Roth / Nextron)· threatintel@volexity.com· 2021-06-23