Files
nuclei-templates/file/malware/dexter-malware.yaml
2024-12-01 13:57:55 +00:00

23 lines
701 B
YAML

id: dexter-malware
info:
name: Dexter Malware - Detect
author: daffainfo
severity: info
reference:
- https://github.com/Yara-Rules/rules/blob/master/malware/MALW_Dexter.yar
- http://goo.gl/oBvy8b
tags: malware,file
file:
- extensions:
- all
matchers:
- type: word
part: raw
words:
- 'Java Security Plugin'
- '%s\\%s\\%s.exe'
- 'Sun Java Security Plugin'
- '\\Internet Explorer\\iexplore.exe'
condition: and
# digest: 4a0a00473045022100c9cfd36b8ab11c5b1dc9a0b81012344312e7e3f01ad9feb9980e094bed079d8c0220680c2ad75c6def0202a9ce3f57b55819ebaec4655d4e309468ab5f0e808ee76e:922c64590222798bb761d5b6d8e72950