Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
R
rules
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
fact-depend
rules
Commits
1f8c2e21
Commit
1f8c2e21
authored
Sep 17, 2015
by
Antonio S
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Generic SMS Fraud rule
parent
0e0bd14c
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
18 additions
and
0 deletions
+18
-0
Android_generic_smsfraud.yar
Mobile_Malware/Android_generic_smsfraud.yar
+18
-0
No files found.
Mobile_Malware/Android_generic_smsfraud.yar
0 → 100644
View file @
1f8c2e21
rule genericSMS : smsFraud
{
meta:
author = "https://twitter.com/plutec_net"
reference = "https://koodous.com/"
sample = "e6ef34577a75fc0dc0a1f473304de1fc3a0d7d330bf58448db5f3108ed92741b"
strings:
$a = "SHA1-Digest: +RsrTx5SNjstrnt7pNaeQAzY4kc="
$b = "SHA1-Digest: Rt2oRts0wWTjffGlETGfFix1dfE="
$c = "http://image.baidu.com/wisebrowse/index?tag1=%E6%98%8E%E6%98%9F&tag2=%E5%A5%B3%E6%98%8E%E6%98%9F&tag3=%E5%85%A8%E9%83%A8&pn=0&rn=10&fmpage=index&pos=magic#/channel"
$d = "pitchfork=022D4"
condition:
all of them
}
\ No newline at end of file
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment