HermeticWiper Malware Detection

This YARA rule detects the HermeticWiper malware based on a specific byte sequence ($corrupt_physical_drive) that is characteristic of its functionality to corrupt physical drives. The rule also checks for the standard PE file magic number (MZ header) to ensure it's applied to executable files.