Common Information
| Type | Value |
|---|---|
| Value |
rule M_APT_Wiper_CADDYWIPER_1 {
meta:
author = "Mandiant"
description = "Searches for the Physical Device call within CADDYWIPER"
strings:
$ = { 00 00 A0 00 }
$ = { 43 3A 5C 55 C7 ?? ?? 73 65 72 73 }
$ = { C7 45 FC 44 3A 5C 00 }
condition:
all of them
}
|
| Category | |
| Type | Yara Rule |
| Misp Type | |
| Description |