Skip to content

R
rules
Commit b1c87ed5 by mmorenog Committed by GitHub
Options

Update Android_HackintTeam_Implant.yar

parent fd426fd8
Showing with 1 additions and 2 deletions
Mobile_Malware/Android_HackintTeam_Implant.yar
......@@ -11,8 +11,7 @@ rule HackingTeam_Android : Android Implant
date = "2016-11-14"
version = "1.0"
strings:
$decryptor = {
12 01 // const/4 v1, 0x0
$decryptor = { 12 01 // const/4 v1, 0x0
D8 00 ?? ?? // add-int/lit8 ??, ??, ??
6E 10 ?? ?? ?? 00 // invoke-virtual {??} -> String.toCharArray()
0C 04 // move-result-object v4
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment