All Detections

Notepad++ Bluetooth Directory Malicious File Creation

avatar
Georg Lauenstein@gsec
updated Feb 9, 20265065

Detects creation of malicious files in AppData\Roaming\Bluetooth directory used for DLL sideloading in infection chain.

YARA-L