ZxShell Malware — Detection Rule

Detects a ZxShell start by the called and well-known function name

Read the full analysis on IntelFusions