Yara Rule - 맬웨어를 감지합니다

🧱 보안 정책/룰 관련
1

Yara Rule - 맬웨어를 감지합니다

Yara 정의.

Yara Rule - Detects malware

Yara definition.

Author: Florian Roth

https://twitter.com/malwrhunterteam/status/1642988428080865281?s

score = 75
date = "2023-04-06"
$s1 = "let payload_chrome = "
$s2 = "else if (agent.indexOf(\"firefox"
date = "2023-04-06"
score = 75
$s1 = "mt_rand( 0, 0xffff ), mt_rand( 0, 0xffff )" ascii
$s2 = "C:\\\\ProgramData\\\\Browsers" ascii fullword
$s3 = "curl_https($api_url." ascii```


[https://github.com/Neo23x0/signature-base/commit/4071da0aaba0ec498569f086357426dc39fe6458](https://github.com/Neo23x0/signature-base/commit/4071da0aaba0ec498569f086357426dc39fe6458)