Advertisement
James_inthe_box

Hawkeye Reborn yara

Aug 15th, 2018
636
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.41 KB | None | 0 0
  1. rule HawkEye_Reborn_v8
  2. {
  3. meta:
  4. author = "James_inthe_box"
  5. date = "2018/08"
  6. maltype = "KeyLogger"
  7. filetype = "exe"
  8.  
  9. strings:
  10. $key = "HawkEye Keylogger" wide
  11. $string1 = "Reborn v8" wide
  12. $string2 = "a.pomf.cat" wide
  13.  
  14. condition:
  15. $key and all of ($string*)
  16. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement