rule EmiratesStatement :
{
meta:
author = "Christiaan Beek"
date = "2013-06-30"
description = "Credentials Stealing Attack"
reference = "https://blogs.mcafee.com/mcafee-labs/targeted-campaign-steals-credentials-in-gulf-states-and-caribbean/"
hash0 = "0e37b6efe5de1cc9236017e003b1fc37"
hash1 = “a28b22acf2358e6aced43a6260af9170"
hash2 = "6f506d7adfcc2288631ed2da37b0db04"
hash3 = "8aebade47dc1aa9ac4b5625acf5ade8f"
strings:
$string0 = "sn.klm"
$string1 = "wmsn.klm"
$string2 = "bms.klm"
condition:
all of them
}