Commit 654e10b1 by mmorenog Committed by GitHub

Update and rename Android_Drendoid_RAT.yar to AAndroid_Dendroid_RAT.yar

parent ee87baa6
...@@ -46,3 +46,17 @@ rule Dendroid_3 : android ...@@ -46,3 +46,17 @@ rule Dendroid_3 : android
all of them all of them
} }
rule Android_Dendroid
{
meta:
author = "Jacob Soo Lead Re"
date = "19-May-2016"
description = "This rule try to detect Dendroid"
source = "https://blog.lookout.com/blog/2014/03/06/dendroid/"
condition:
androguard.service(/com.connect/i) and
androguard.permission(/android.permission.RECEIVE_BOOT_COMPLETED/i)
}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment