rule n1fid04w_exe meta: description = "Detects known n1fid04w.exe samples" author = "Security Analyst" date = "2024-03-12" strings: $s1 = "n1fid04w" nocase $s2 = 68 ?? ?? ?? ?? 6A 00 6A 01 6A 02 // typical prologue pattern condition: $s1 or $s2
rule n1fid04w_exe meta: description = "Detects known n1fid04w.exe samples" author = "Security Analyst" date = "2024-03-12" strings: $s1 = "n1fid04w" nocase $s2 = 68 ?? ?? ?? ?? 6A 00 6A 01 6A 02 // typical prologue pattern condition: $s1 or $s2
rule n1fid04w_exe meta: description = "Detects known n1fid04w.exe samples" author = "Security Analyst" date = "2024-03-12" strings: $s1 = "n1fid04w" nocase $s2 = 68 ?? ?? ?? ?? 6A 00 6A 01 6A 02 // typical prologue pattern condition: $s1 or $s2

Contact: Kerwin Shen Web: www.fmuser.net
Whatsapp/Wechat: +86 183 1924 4009 n1fid04w.exe
Skype: tomleequan Email: [email protected] n1fid04w.exe
Facebook: FMUSERBROADCAST Youtube: FMUSER n1fid04w.exe
Address in English: Room305, HuiLanGe, No.273 HuangPu Road West, TianHe District., GuangZhou, China, 510620 Address in Chinese: 广州市天河区黄埔大道西273号惠兰阁305(3E)