rule ISRStealer
{
    meta:
        description = "ISRStealer"
        author = "avman"
         reference = "https://app.any.run/tasks/786d8fad-eafc-49d8-9670-c8999226af64"
        date = "2019/04"
        maltype = "stealer"

  strings:
        $string1 = "HardCore Software For : Public"
        $string2 = "?action=add&username="
        $string3 = "&password="
        $string4 = "&pcname="


    condition:
        all of them
}