2026-07-07_cb80eeabade0cea198b289ceda1b0e54_amadey_avoslocker_cobalt-strike_coinminer_darkgate_elex_graphican_koxic_luca-stealer_lynx_njrat
- SHA256 3f914046b8d3ff3ed71a842b69c917b0774b48b5e69f1f8460c3badeee66d7fb
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Unsigned PE
Checks for missing Authenticode signature.
generic
count=10, id=259, version=27412,
count=160, id=261, version=27412,
count=37, id=261, version=29804,
count=20, id=260, version=29804,
count=22, id=259, version=29804,
count=20, id=260, version=27412,
count=1, id=262, version=27412,
count=15, id=257, version=27412,
count=136, id=1, productName=Unmarked objects,
count=193, id=260, productName=VS2019 v16.9.2 build 29913, version=29913,
count=7, id=264, version=29913,
count=1, id=255, productName=VS2019 v16.9.2 build 29913, version=29913,
count=1, id=258, productName=VS2019 v16.9.2 build 29913, version=29913,