Rule win_orcus_rat_auto (20200421 | autogenerated rule brought to you by yara-signator) [TLP:WHITE] Rule uses strings automatically selected from disassembly of memory dumps and unpacked files. The code and documentation / approach will be published in the near future here: https://://github.com/fxb-cocacoding/yara-Signator. As Malpedia is used as data source, please note that for a given * number of families, only single samples are documented.”]
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.orcus_rat