Commit dfa5e898 by mmorenog

Update Android_Drendoid_RAT.yar

parent c633b4af
......@@ -6,8 +6,8 @@
rule Dendroid
{
meta:
author = "https://twitter.com/jsmesa"
reference = "https://koodous.com/"
author = "https://twitter.com/jsmesa"
reference = "https://koodous.com/"
description = "Dendroid RAT"
strings:
$s1 = "/upload-pictures.php?"
......@@ -23,7 +23,8 @@ rule Dendroid
rule Dendroid_2
{
meta:
author = "https://twitter.com/jsmesa"
author = "https://twitter.com/jsmesa"
reference = "https://koodous.com/"
description = "Dendroid evidences via Droidian service"
strings:
$a = "Droidian"
......@@ -36,7 +37,8 @@ rule Dendroid_2
rule Dendroid_3
{
meta:
author = "https://twitter.com/jsmesa"
author = "https://twitter.com/jsmesa"
reference = "https://koodous.com/"
description = "Dendroid evidences via ServiceReceiver"
strings:
$1 = "ServiceReceiver"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment