Create MALW_Trumpbot.yar

62590daa · wolfvan · GitHub · 6ff1b023 · 62590daa
Unverified Commit 62590daa authored Nov 01, 2017 by wolfvan Committed by GitHub Nov 01, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 16 additions and 0 deletions

MALW_Trumpbot.yar malware/MALW_Trumpbot.yar +16 -0

No files found.
--- a/malware/MALW_Trumpbot.yar
+++ b/malware/MALW_Trumpbot.yar
+rule TrumpBot : MALW
+{
+	meta:
+		description = "TrumpBot"
+		author = "Joan Soriano / @joanbtl"
+		date = "2017-04-16"
+		version = "1.0"
+		MD5 = "77122e0e6fcf18df9572d80c4eedd88d"
+		SHA1 = "108ee460d4c11ea373b7bba92086dd8023c0654f"
+
+	strings:
+		$string = "trumpisdaddy"
+		$ip = "198.50.154.188"
+	condition:
+		 all of them
+}