Reglas YARA con la etiqueta CHARMINGCYPRESS
6 reglas llevan la etiqueta «CHARMINGCYPRESS».
VBS backdoor which bares architectural similarity to the POWERSTAR malware family.
APT / actorVolexity threat-intel· threatintel@volexity.com· 2024-01-04Detects a fake OpenVPN client developed by CharmingCypress.
APT / actorVolexity threat-intel· threatintel@volexity.com· 2023-10-17Detection for a .ovpn file used in a malicious VPN client on victim machines by CharmingCypress.
APT / actorVolexity threat-intel· threatintel@volexity.com· 2023-10-17Detection for fake macOS VPN client used by CharmingCypress.
APT / actorVolexity threat-intel· threatintel@volexity.com· 2023-10-17Detects POWERSTAR modules based on common HTTP functions used across modules.
APT / actorVolexity threat-intel· threatintel@volexity.com· 2023-06-02Detects POWERLESS malware.
APT / actorVolexity threat-intel· threatintel@volexity.com· 2023-10-25