BlackHatSect0r DXSCAN Hermes Agent Artifacts (SOUL.md/.hermes)

Ankit Mehta@Secvyn

•updated 23 days ago•2•0•2

Detects file and process activity associated with the Hermes ransomware, specifically targeting the presence of 'SOUL.md' files, '.hermes' file paths, and the 'HERMES_DISABLE_SAFETY=1' command-line argument.