daily pastebin goal
62%
SHARE
TWEET

AveMaria yara

James_inthe_box Dec 14th, 2018 225 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. rule AveMaria_bin_mem
  2. {
  3.     meta:
  4.         description = "AveMaria infostealer"
  5.         author = " James_inthe_box"
  6.         reference = "https://app.any.run/tasks/67362469-76df-4b19-bfda-5d95a2b4d179"
  7.         date = "2018/12"
  8.         maltype = "Infotealer"
  9.  
  10.     strings:
  11.         $string1 = "127.0.0.2"
  12.         $string2 = "profiles.ini" wide
  13.         $string3 = "AVE_MARIA"
  14.         $string4 = "MortyCrypter" wide
  15.  
  16.     condition:
  17.         all of ($string*)
  18. }
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top