Commit b1213570 by mmorenog

Update Android_malware_ChinesePorn.yar

parent 657f67be
...@@ -10,7 +10,7 @@ ...@@ -10,7 +10,7 @@
import "androguard" import "androguard"
rule sensual_woman: chinese rule sensual_woman: chinese android
{ {
meta: meta:
author = "https://twitter.com/plutec_net" author = "https://twitter.com/plutec_net"
...@@ -25,7 +25,7 @@ rule sensual_woman: chinese ...@@ -25,7 +25,7 @@ rule sensual_woman: chinese
or androguard.package_name(/com.video.uiA/i) or androguard.package_name(/com.video.uiA/i)
} }
rule chinese2 : sms_sender rule chinese2 : sms_sender android
{ {
meta: meta:
author = "https://twitter.com/plutec_net" author = "https://twitter.com/plutec_net"
...@@ -39,7 +39,7 @@ rule chinese2 : sms_sender ...@@ -39,7 +39,7 @@ rule chinese2 : sms_sender
androguard.package_name(/kr.mlffstrvwb.mu/) androguard.package_name(/kr.mlffstrvwb.mu/)
} }
rule chinese_porn : SMSSend rule chinese_porn : SMSSend android
{ {
meta: meta:
author = "https://twitter.com/plutec_net" author = "https://twitter.com/plutec_net"
...@@ -49,7 +49,7 @@ rule chinese_porn : SMSSend ...@@ -49,7 +49,7 @@ rule chinese_porn : SMSSend
androguard.package_name("com.shenqi.video.nfkw.neim") androguard.package_name("com.shenqi.video.nfkw.neim")
} }
rule chineseporn4 : SMSSend rule chineseporn4 : SMSSend android
{ {
meta: meta:
author = "https://twitter.com/plutec_net" author = "https://twitter.com/plutec_net"
...@@ -59,7 +59,7 @@ rule chineseporn4 : SMSSend ...@@ -59,7 +59,7 @@ rule chineseporn4 : SMSSend
androguard.package_name("org.mygson.videoa.zw") androguard.package_name("org.mygson.videoa.zw")
} }
rule chineseporn5 : SMSSend rule chineseporn5 : SMSSend android
{ {
meta: meta:
author = "https://twitter.com/plutec_net" author = "https://twitter.com/plutec_net"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment