#100DaysofYara
Day 6:
This rule detects TrueCrypt, which is the crypter written in Golang and is used by many well-known stealer families, such as Raccoon Stealer, Vidar, MetaStealer, Redline, and Lumma stealers.
Let's make our rules more confusing for malware developers 😉