Common Information
Type Value
Value
rule Ande_Loader {
	meta:
		author = "eSentire TI"
		description = "Ande_Loader"
		date = "7/3/2023"
	strings:
		$s1 = { 37 39 31 37 32 42 31 33 2D 45 44 42 41 2D 34 30 39 36 2D 42 37 32 35 2D 38 45 39 32 42 37 33 30 42 32 42 41 }
		$s2 = { 56 41 49 }
		$s3 = { 6F 25 00 00 0A }
		$s4 = { 28 ?? 00 00 0A }
	condition:
		all of ($s*)
}
Category
Type Yara Rule
Misp Type
Description
Details Published Attributes CTI Title
Details Website 2024-05-29 72 Malware Analysis: Blind Eagle's North American Journey