Create tedroo.yar

e875043c · Kevin Falcoz · 4243611d · e875043c
Commit e875043c authored Nov 22, 2015 by Kevin Falcoz
Hide whitespace changes
Inline Side-by-side

Showing with 14 additions and 0 deletions

tedroo.yar malware/tedroo.yar +14 -0

No files found.
--- a/malware/tedroo.yar
+++ b/malware/tedroo.yar
+rule Tedroo : Spammer
+{
+	meta:
+		author="Kevin Falcoz"
+		date="22/11/2015"
+		description="Tedroo Spammer"
+
+	strings:
+		$signature1={25 73 25 73 2E 65 78 65}
+		$signature2={5F 6C 6F 67 2E 74 78 74}
+
+	condition:
+		$signature1 and $signature2
+}