All Detections

Notepad++ Adobe Scripts Malicious File Creation

avatar
Georg Lauenstein@gsec
updated Feb 9, 202640102

Detects creation of malicious Lua script files in AppData\Roaming\Adobe\Scripts directory used in infection chain.

YARA-L