MAL TOSHIS Loader TAOTH Aug25

Detects TOSHIS malware, a loader used in the TAOTH campaign to deploy Cobalt Strike or Merlin Agent. This rule identifies the malware based on unique strings found in the payload.

YARA