Sneed-Reactivity/yara-mikesxrs/malwaretracker/apt_actor_tran_duy_linh.yar
Sam Sneed 08e8d462fe OMG ISTG PLS WORK
RED PILL 🔴 💊
2024-07-25 12:43:35 -05:00

11 lines
344 B
Text

rule apt_actor_tran_duy_linh
{
meta:
info = "author"
reference = "http://blog.malwaretracker.com/2013/06/tomato-garden-campaign-part-2-old-new.html"
strings:
$auth = { 4E 6F 72 6D 61 6C 2E 64 6F 74 6D 00 1E 00 00 00 10 00 00 00 54 72 61 6E 20 44 75 79 20 4C 69 6E 68 }
condition:
$auth
}