Common Information
| Type | Value |
|---|---|
| Value |
import "pe"
rule dragos_crashoverride_exporting_dlls {
meta:
description = "CRASHOVERRIDE v1 Suspicious Export"
author = "Dragos Inc"
condition:
pe.exports("Crash") & pe.characteristics
}
|
| Category | |
| Type | Yara Rule |
| Misp Type | |
| Description |