Rule Info
Name
MAL_ShellCode_Loader_Jun26
Author
AzizFarghly
Description
Detects a shellcode loader, seen being used by Grieflure APT
Score
80
Date
2026-06-17
Minimum Yara
3.5.0
Rule Hash
44703d9656cf99abb69aba4f3cee69f2
Tags
['MAL']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
3
Suspicious (< 10 engines)
0
Clean (0 engines)
20
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR