SUSP Packed EDR Killer HeartCrypt Aug25
Detects a packed EDR Killer tool used by multiple ransomware groups like RansomHub, INC, and Medusa. This tool, often packed with HeartCrypt, is designed to disable various security products by loading a malicious driver.
YARA
