BRICKSTORM Malware Indicators of Compromise

Detects known file hashes and filenames associated with the BRICKSTORM backdoor as reported by Google/Mandiant in relation to UNC5221 activity.

Sigma