Ratty RAT Distribution via Multi-Layered Email Attack

Detects network connections or file events related to Ratty RAT malware distribution using PDF, HTML, Dropbox, Ngrok, and MediaFire.

Sigma