ColdDriver Bitsadmin File Download
Detects the use of BITSAdmin to download a remote file with a potentially malicious extension. This technique is used by COLDRIVER's NOROBOT malware to retrieve subsequent stages.
YARA-L
Detects the use of BITSAdmin to download a remote file with a potentially malicious extension. This technique is used by COLDRIVER's NOROBOT malware to retrieve subsequent stages.
Already have an account?