12 lines
232 B
Text
12 lines
232 B
Text
|
rule ShellCreator2
|
||
|
|
{
|
||
|
|
meta:
|
||
|
|
reference = "https://cdn2.hubspot.net/hubfs/270968/assets/Cleaver/Cylance_Operation_Cleaver_Report.pdf"
|
||
|
|
|
||
|
|
strings:
|
||
|
|
$s1 = "ShellCreator2.Properties"
|
||
|
|
$s2 = "set_IV"
|
||
|
|
|
||
|
|
condition:
|
||
|
|
all of them
|
||
|
|
}
|