Toy Ghouls bird-agent Backdoor Binaries (cplsupport.exe/wtass.exe)
Detects Toy Ghouls backdoor binaries (cplsupport.exe and wtass.exe) via known MD5 hashes or the presence of these files alongside a config.toml configuration file.
YARA
Detects Toy Ghouls backdoor binaries (cplsupport.exe and wtass.exe) via known MD5 hashes or the presence of these files alongside a config.toml configuration file.
Already have an account?