Sneed-Reactivity/yara-mikesxrs/malc0de/hacksfase_apt1.yar
Sam Sneed 08e8d462fe OMG ISTG PLS WORK
RED PILL 🔴 💊
2024-07-25 12:43:35 -05:00

9 lines
No EOL
192 B
Text

rule hacksfase : apt
{
strings:
$a = "!@#%$^#@!"
$b = "Cann't create remote process!"
$c = "tthacksfas@#$"
condition:
filesize < 300KB and (3 of ($a,$b,$c))
}