Rule Document 1:66396

Rule Category

MALWARE-OTHER --

Alert Message

MALWARE-OTHER Win.Trojan.Fast16 download attempt

Rule Explanation

This rule specifically hits on a binary pattern in the binary's code this is unlikely to change and is necessary for the malicious behavior of the executable.

What To Look For

This rule triggers when it detects a known malicious driver being transferred.

Known Usage

Attacks/Scans seen in the wild

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group