Small Sieve Malware Command Line Indicator
Detects a specific command line argument being passed to a binary, which has been observed in use by the Small Sieve malware. The rule specifically looks for command lines ending with '.exe Platypus'.
Sigma

Detects a specific command line argument being passed to a binary, which has been observed in use by the Small Sieve malware. The rule specifically looks for command lines ending with '.exe Platypus'.

Already have an account?