Crashfix Modelorat Python Execution
Detects the execution of Python scripts with names associated with the ModeloRAT, often launched from user AppData or Temp directories as part of the CrashFix campaign.
YARA-L
Detects the execution of Python scripts with names associated with the ModeloRAT, often launched from user AppData or Temp directories as part of the CrashFix campaign.
Already have an account?