James_inthe_box

Abs0lem yar

Sep 13th, 2018
560
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.21 KB | None | 0 0
  1. rule Abs0lem_hvnc_memory
  2. {
  3. meta:
  4. author = "James_inthe_box"
  5. date = "2018/09"
  6. maltype = "Stealer"
  7.  
  8. strings:
  9. $string1 = "ABS0LEM-HVNC-%08X%08X"
  10. $string2 = "#hvnc"
  11.  
  12. condition:
  13. all of them
  14. }
Advertisement
Add Comment
Please, Sign In to add comment