Commit 18bcf8ab by mmorenog

Update Android_Malware_Ramsonware.yar

parent 0e055f7b
......@@ -17,3 +17,25 @@ rule ransomware : svpeng
condition:
$a and $b
}
rule Ransomware : banker
{
meta:
author = "Fernando Denis"
reference = "https://koodous.com/"
description = "Ransomware Test 2"
thread_level = 3
in_the_wild = true
strings:
$strings_a = "!2,.B99^GGD&R-"
$strings_b = "22922222222222222222Q^SAAWA"
$strings_c = "t2222222222229222Q^SAAWA"
condition:
any of ($strings_*)
}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment