Argamal RAT Screenshot Artifact
Detects the creation of the specific hardcoded temporary file (~wra1269.tmp) used by the Argamal RAT to store captured screenshots during its surveillance operations prior to exfiltration.
Sigma
Detects the creation of the specific hardcoded temporary file (~wra1269.tmp) used by the Argamal RAT to store captured screenshots during its surveillance operations prior to exfiltration.
Already have an account?