Yara Rule - 2023 년 8 월 Qakbot에 대한 혼란에서 FBI와 Dutch National Police가 사용하는 Qakbot Un -intaller 파일을 감지
Yara 정의.
Yara Rule - Detects Qakbot Uninstaller files used by the FBI and Dutch National Police in a disruption operation against the Qakbot in August 2023
Yara definition.
Author: Florian Roth
https://www.justice.gov/usao-cdca/divisions/national-security-division/qakbot-resources
date = "2023-08-30"
score = 60
$xc1 = { E8 00 00 00 00 58 55 89 E5 89 C2 68 03 00 00 00```
[https://github.com/Neo23x0/signature-base/commit/c01b8ca78f69c669e58562057adabfe867c6f1cc](https://github.com/Neo23x0/signature-base/commit/c01b8ca78f69c669e58562057adabfe867c6f1cc)