Reglas YARA con la etiqueta DOWNLOAD
4 reglas llevan la etiqueta «DOWNLOAD».
- SECUINFRA_SUSP_Discord_Attachments_URLSolo metadatos
Detects a PE file that contains an Discord Attachments URL. This is often used by Malware to download further payloads
Sospechoso / huntingSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-02-19 - SECUINFRA_SUSP_Powershell_Download_Temp_RundllSolo metadatos
Detect a Download to %temp% and execution with rundll32.exe
Sospechoso / huntingSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-09-02 - SECUINFRA_SUSP_Powershell_Download_Temp_Rundll_1Solo metadatos
Detect a Download to %temp% and execution with rundll32.exe
Sospechoso / huntingSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-09-02 - SECUINFRA_SUSP_DOTNET_PE_Download_To_SpecialfolderSolo metadatos
Detects a .NET Binary that downloads further payload and retrieves a special folder
Sospechoso / huntingSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-02-27