Yara Rule - ADEDESK의 잠재적으로 손상된 서명 인증서로 서명 된 바이너리를 감지 (Philandro Software Gmbh, 0DBF152DEAP0B981A8A938D53F769DB8; 허용 버전). 관련 IOC 4개 발견
Yara 정의.
Neo23x0
Yara Rule - Detects binaries signed with a potentially compromised signing certificate of AnyDesk (philandro Software GmbH, 0DBF152DEAF0B981A8A938D53F769DB8; permissive version)
Yara definition.
https://github.com/Neo23x0/signature-base/commit/9804d8e9ea7ea9056dd5fe26e4d4f784d71645ec