Nextron YARA rules Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Verdictmalware
Severitymedium
Public Nextron YARA rules
Triggered on HTTP #11
Matched indicatorld1y12.oss-cn-shenzhen.aliyuncs.com/images/ojUC9OoyiM6OQJ8u.js