# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: blueroh, bulehero

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/fileless-cryptocurrency-miner-ghostminer-weaponizes-wmi-objects-kills-other-cryptocurrency-mining-payloads/
# Reference: https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/trojan.win32.blueroh.rpb?_ga=2.3915958.786123329.1569179045-1407713373.1562787167

bulehero.in