Create derkziel_stealer

derkziel_stealer

+rule Derkziel
+{
+    meta:
+        description = "Derkziel info stealer (Steam, Opera, Yandex, ...)"
+        author = "The Malware Hunter"
+        yaraexchange = "No distribution without author's consent"
+        filetype = "pe"
+        date = "2015-11"
+        md5 = "f5956953b7a4acab2e6fa478c0015972"
+        site = "https://zoo.mlw.re/samples/f5956953b7a4acab2e6fa478c0015972"
+        reference = "https://bhf.su/threads/137898/"
+    strings:
+        $drz = "{!}DRZ{!}"
+        $ua = "User-Agent: Uploador"
+        $steam = "SteamAppData.vdf"
+        $login = "loginusers.vdf"
+        $config = "config.vdf"
+    condition:
+        all of them
+}