Create Android_Copy9.yar

763ccf39 · mmorenog · GitHub · 47a7f172 · 763ccf39
Commit 763ccf39 authored Jul 06, 2016 by mmorenog Committed by GitHub Jul 06, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 14 additions and 0 deletions

Android_Copy9.yar Mobile_Malware/Android_Copy9.yar +14 -0

No files found.
--- a/Mobile_Malware/Android_Copy9.yar
+++ b/Mobile_Malware/Android_Copy9.yar
+import "androguard"
+
+rule Android_Copy9
+{
+	meta:
+		author = "Jacob Soo Lead Re"
+		date = "06-June-2016"
+		description = "This rule try to detect commercial spyware from Copy9"
+		source = "http://copy9.com/"
+
+	condition:
+		androguard.service(/com.ispyoo/i) and
+        androguard.receiver(/com.ispyoo/i)
+}