Sneed-Reactivity/yara-mikesxrs/Airbus/sakula_packed_v2-2.yar

15 lines
380 B
Text
Raw Normal View History

rule sakula_packed_v2_2
{
meta:
description = "Sakula packer v2.2"
date = "2015-10-13"
author = "Airbus Defence and Space Cybersecurity CSIRT - Yoann Francou"
reference = "http://blog.airbuscybersecurity.com/post/2015/10/Malware-Sakula-Evolutions-%28Part-2/2%29"
strings:
$m = "goldsunfucker"
condition:
all of them
}