Sneed-Reactivity/yara-mikesxrs/ballastsecurity/dexter.yara
Sam Sneed 08e8d462fe OMG ISTG PLS WORK
RED PILL 🔴 💊
2024-07-25 12:43:35 -05:00

15 lines
No EOL
360 B
Text

rule dexter_strings
{
meta:
author = "Brian Wallace @botnet_hunter"
author_email = "bwall@ballastsecurity.net"
date = "2014-09-10"
description = "Identify Dexter POSGrabber"
strings:
$s1 = "UpdateMutex:"
$s2 = "response="
$s3 = "page="
$s4 = "scanin:"
condition:
all of them
}