Add files via upload

doomedraven · Jun 4, 2021 · 97eeedd · 97eeedd
1 parent 3a481db
commit 97eeedd
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/...nced_Memory_Forensics_Threat_Hunting_and_Malware_Analysis/Suspicious_strings_template.yar b/...nced_Memory_Forensics_Threat_Hunting_and_Malware_Analysis/Suspicious_strings_template.yar
@@ -0,0 +1,21 @@
+rule suspicious_strings {
+
+    meta:
+            description = "Detect Defined Interesting Strings"
+            author = "Dump-GUY"
+
+    strings:
+            $st1 = "main.php" nocase wide ascii
+            $st2 = "kpfxtde.in" nocase wide ascii
+            $st3 = "ioecvmmqs.in" nocase wide ascii
+            $st4 = "llsvayrnovcomp.yt" nocase wide ascii
+            $st5 = "qcolxl.de" nocase wide ascii
+            $st6 = "ioecvmmqs.in" nocase wide ascii
+            $st7 = "nfaxeyiipnoe.it" nocase wide ascii
+            $st8 = "tnaub.nl" nocase wide ascii
+            $st9 = "oweykuxjbqhtx.in" nocase wide ascii
+            $st10 = "qxmavqrgvdo.pw" nocase wide ascii
+
+    condition:
+            any of them
+}