Rule Info
Name
APT_MAL_Donot_Downloader_Dec25
Author
MalGamy
Description
Detects downloader that downloads and executes additional payloads, seen being used by dotnet APT group
Score
80
Date
2025-12-01
Modified
2025-12-18
Minimum Yara
3.5.0
Rule Hash
939e3e74361ed87390c85f41f4eeac61
Tags
['APT', 'EXE', 'FILE', 'MAL']
Required Modules
[]
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
8
Suspicious (< 10 engines)
4
Clean (0 engines)
1
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR