Hartoyo Wahyu
@plankton0 followers60 downloads3 copies5 likes351 views
2 detections
Filters
Last updated
All Time
Detection languages
2
Categories
1
1
1
Platforms
1
1
1
1
1
Products / Services
1
1
1
MITRE Techniques
1
1
1
1
1
This rule detects the presence of Olymp Loader malware by identifying known malicious file hashes (SHA256) and network communication with associated distribution domains. It looks for these indicators across various data sources, normalizing fields for consistent output. The rule aims to identify systems infected with or communicating with Olymp Loader infrastructure.
SPL Query from file: AWS CreateAccessKey