Zanubis Propose Change

According to cyware, Zanubis malware pretends to be a malicious PDF application. The threat actor uses it as a key to decrypt responses received from the C2 server.

References

There is no Yara-Signature yet.