Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs
This commit is contained in:
25
data/ioc/yara/malware_families/mirage.yara
Normal file
25
data/ioc/yara/malware_families/mirage.yara
Normal file
@@ -0,0 +1,25 @@
|
||||
private rule MirageStrings : Mirage Family
|
||||
{
|
||||
meta:
|
||||
description = "Mirage Identifying Strings"
|
||||
author = "Seth Hardy"
|
||||
last_modified = "2014-06-25"
|
||||
|
||||
strings:
|
||||
$ = "Neo,welcome to the desert of real." wide ascii
|
||||
$ = "/result?hl=en&id=%s"
|
||||
|
||||
condition:
|
||||
any of them
|
||||
}
|
||||
|
||||
rule Mirage : Family
|
||||
{
|
||||
meta:
|
||||
description = "Mirage"
|
||||
author = "Seth Hardy"
|
||||
last_modified = "2014-06-25"
|
||||
|
||||
condition:
|
||||
MirageStrings
|
||||
}
|
||||
Reference in New Issue
Block a user