11 lines
372 B
Text
11 lines
372 B
Text
rule Rana_Android_resources {
|
|
meta:
|
|
author = "ReversingLabs"
|
|
reference = "https://blog.reversinglabs.com/blog/rana-android-malware"
|
|
strings:
|
|
$res1 = "res/raw/cng.cn" fullword wide ascii
|
|
$res2 = "res/raw/att.cn" fullword wide ascii
|
|
$res3 = "res/raw/odr.od" fullword wide ascii
|
|
condition:
|
|
any of them /* any string in the rule */
|
|
}
|