Operation DragonReturn: Income Tax Lure ZIP Dropping COU_ITR-1 Executable
Detects the execution of a specific malicious executable (COU_ITR-1_to_4_AY2026-27.exe) identified as part of the Operation DragonReturn spearphishing campaign. The campaign impersonates the Indian Income Tax Department to lure users into executing the file.
YARA-L
