Sneed-Reactivity/yara-mikesxrs/alienvault/ccrewQAZ.yar

12 lines
167 B
Text
Raw Normal View History

rule ccrewQAZ
{
meta:
author = "AlienVault Labs"
info = "CommentCrew-threat-apt1"
strings:
$a = "!QAZ@WSX" wide ascii
condition:
$a
}