instr[.]idDomain
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Advent of Configuration Extraction, Part 3: SNOWLIGHT Config“if instr[.]id == X86_INS_CALL:”
Indicators reported together
named in the same reports- 344c391cfd4fd304…b3c6c4cbbb29in 1 report
- rel.symbol[.]namein 1 report
- symbol[.]namein 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.