Commit a5809c2a by mmorenog

Update Android_MazarBot_z.yar

parent 4c601058
......@@ -16,9 +16,8 @@ rule android_mazarBot_z
meta:
author = "https://twitter.com/5h1vang"
reference_1 = "https://heimdalsecurity.com/blog/security-alert-mazar-bot-active-attacks-android-malware/"
reference_2 = "
description = "Yara detection for MazarBOT"
sample = "73c9bf90cb8573db9139d028fa4872e93a528284c02616457749d40878af8cf8"
description = "Yara detection for MazarBOT"
sample = "73c9bf90cb8573db9139d028fa4872e93a528284c02616457749d40878af8cf8"
strings:
$str_1 = "android.app.extra.ADD_EXPLANATION"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment