id: seaduke-malware-hash
info:
  name: SeaDuke Malware Hash - Detect
  author: pussycat0x
  severity: info
  reference: |
    http://goo.gl/MJ0c2M
    https://github.com/Yara-Rules/rules/blob/master/malware/APT_Seaduke.yar
  tags: malware,seaduke

file:
  - extensions:
      - all

    matchers:
      - type: dsl
        dsl:
          - "sha256(raw) == 'd2e570129a12a47231a1ecb8176fa88a1bf415c51dabd885c513d98b15f75d4e'"
# digest: 4a0a00473045022068af452e8eb2400313f2c71ad78154d48d3400cfb9e05b3f9c6b73bb4582b4c702210094ffcfb886ced7a115674e4a9ab1da4498e14329e6ce40f37a0f17003e8aa7d8:922c64590222798bb761d5b6d8e72950