Vidar Stealer known sample hashes (v2.0-v3.4) in file/process events

Arnold Chan@slaz

•updated 13 days ago•0•0•2

This rule monitors for file and process creation events associated with known MD5 and SHA256 hashes linked to the Vidar infostealer malware.