aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b
- SHA256 aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b
-
Detects AmaqFinder payload
-
Unsigned PE
Checks for missing Authenticode signature.
Behavioral task
behavioral1
Sample
aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b.exe
Resource
win10v2004-20251231-en
Behavioral task
behavioral2
Sample
aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b.exe
Resource
win11-20251231-en
| resource | yara_rule |
|---|---|
| static1/unpack001/aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b | family_amaqfinder |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b |
Detects AmaqFinder payload
Unsigned PE
Checks for missing Authenticode signature.
Detects AmaqFinder payload
Unsigned PE
Checks for missing Authenticode signature.