Ousaban steganographic PNG hiding ZIP payload (SysMain.exe)
Detects a malicious PNG file used by the Ousaban VBS downloader that embeds a ZIP archive containing a payload named 'SysMain.exe' appended after the PNG IEND chunk.
YARA
Detects a malicious PNG file used by the Ousaban VBS downloader that embeds a ZIP archive containing a payload named 'SysMain.exe' appended after the PNG IEND chunk.
Already have an account?