Skip to content

R
rules
Commit dfa5e898 by mmorenog
Options

Update Android_Drendoid_RAT.yar

parent c633b4af
Showing with 2 additions and 0 deletions
Malware_Mobile/Android_Drendoid_RAT.yar
...@@ -24,6 +24,7 @@ rule Dendroid_2 ...@@ -24,6 +24,7 @@ rule Dendroid_2
{ {
meta: meta:
author = "https://twitter.com/jsmesa" author = "https://twitter.com/jsmesa"
reference = "https://koodous.com/"
description = "Dendroid evidences via Droidian service" description = "Dendroid evidences via Droidian service"
strings: strings:
$a = "Droidian" $a = "Droidian"
...@@ -37,6 +38,7 @@ rule Dendroid_3 ...@@ -37,6 +38,7 @@ rule Dendroid_3
{ {
meta: meta:
author = "https://twitter.com/jsmesa" author = "https://twitter.com/jsmesa"
reference = "https://koodous.com/"
description = "Dendroid evidences via ServiceReceiver" description = "Dendroid evidences via ServiceReceiver"
strings: strings:
$1 = "ServiceReceiver" $1 = "ServiceReceiver"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment