SHARE
TWEET

VNCOLD yara sig

James_inthe_box Jan 23rd, 2019 409 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. rule Vncold_hvnc_memory
  2. {
  3.         meta:
  4.                 author = "James_inthe_box"
  5.                 date = "2018/09"
  6.                 maltype = "Stealer"
  7.  
  8.         strings:
  9.                 $string1 = "(%S)_%08x-VNCOLD"
  10.                 $string2 = "#hvnc"
  11.  
  12.         condition:
  13.                 all of them
  14. }
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top