Reglas YARA con la etiqueta INKYSQUID
3 reglas llevan la etiqueta «INKYSQUID».
The BLUELIGHT malware family. Leverages Microsoft OneDrive for network communications.
APT / actorSignature Base (Florian Roth / Nextron)· threatintel@volexity.com· 2021-04-23Python Loader used to execute the BLUELIGHT malware family.
APT / actorSignature Base (Florian Roth / Nextron)· threatintel@volexity.com· 2021-06-22The DECROK malware family, which uses the victim's hostname to decrypt and execute an embedded payload.
APT / actorSignature Base (Florian Roth / Nextron)· threatintel@volexity.com· 2021-06-23