Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
R
rules
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
fact-depend
rules
Commits
22f2791e
Commit
22f2791e
authored
Aug 10, 2015
by
Jose Vila
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Androguard yara module published. Update androguard disclaimer.
parent
15a48dd2
Hide whitespace changes
Inline
Side-by-side
Showing
14 changed files
with
30 additions
and
74 deletions
+30
-74
Android_ASSDdeveloper.yar
Malware_Mobile/Android_ASSDdeveloper.yar
+2
-5
Android_BatteryBot_ClickFraud.yar
Malware_Mobile/Android_BatteryBot_ClickFraud.yar
+2
-5
Android_FakeApps.yar
Malware_Mobile/Android_FakeApps.yar
+2
-5
Android_MalwareCertificates.yar
Malware_Mobile/Android_MalwareCertificates.yar
+2
-5
Android_Malware_Tinhvan.yar
Malware_Mobile/Android_Malware_Tinhvan.yar
+2
-5
Android_VirusPolicia.yar
Malware_Mobile/Android_VirusPolicia.yar
+2
-5
Android_malware_Advertising.yar
Malware_Mobile/Android_malware_Advertising.yar
+2
-5
Android_malware_ChinesePorn.yar
Malware_Mobile/Android_malware_ChinesePorn.yar
+3
-7
Android_malware_Fake_Facebook.yar
Malware_Mobile/Android_malware_Fake_Facebook.yar
+2
-5
Android_malware_Fake_Minecraft.yar
Malware_Mobile/Android_malware_Fake_Minecraft.yar
+2
-5
Android_malware_Fake_market.yar
Malware_Mobile/Android_malware_Fake_market.yar
+2
-5
Android_malware_HackingTeam.yar
Malware_Mobile/Android_malware_HackingTeam.yar
+2
-5
Android_malware_SMSsender.yar
Malware_Mobile/Android_malware_SMSsender.yar
+2
-5
Android_malware_banker.yar
Malware_Mobile/Android_malware_banker.yar
+3
-7
No files found.
Malware_Mobile/Android_ASSDdeveloper.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_BatteryBot_ClickFraud.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_FakeApps.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_MalwareCertificates.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_Malware_Tinhvan.yar
View file @
22f2791e
...
...
@@ -4,12 +4,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_VirusPolicia.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_malware_Advertising.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_malware_ChinesePorn.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
@@ -75,4 +72,4 @@ rule chineseporn5 : SMSSend
androguard.package_name("com.android.sxye.wwwl") or
androguard.certificate.issuer(/llfovtfttfldddcffffhhh/)
}
\ No newline at end of file
}
Malware_Mobile/Android_malware_Fake_Facebook.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_malware_Fake_Minecraft.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_malware_Fake_market.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_malware_HackingTeam.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_malware_SMSsender.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
Malware_Mobile/Android_malware_banker.yar
View file @
22f2791e
...
...
@@ -3,12 +3,9 @@
*/
/*
Androguard module used in this rule file is under development by people at https://koodous.com/. Unfortunately it isn't published yet.
We will update this rule file and our website once the module is published.
Androguard module used in this rule file is under development by people at https://koodous.com/.
Androguard module is based on androguard tool available @ https://github.com/androguard/androguard.
https://koodous.com/ is a very nice android malware analysis platform you can check out if you want to analyze your APK.
You can get it, along with installation instructions, at https://github.com/Koodous/androguard-yara
*/
import "androguard"
...
...
@@ -42,4 +39,4 @@ rule Installer: banker
condition:
androguard.package_name("Jk7H.PwcD")
}
\ No newline at end of file
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment