Files
nuclei-templates/file/malware/fudcrypt-malware.yaml
2024-12-01 13:57:55 +00:00

30 lines
1.0 KiB
YAML

id: fudcrypt-malware
info:
name: FUDCrypt Malware - Detect
author: daffainfo
severity: info
reference:
- https://github.com/gigajew/FudCrypt/
- https://github.com/Yara-Rules/rules/blob/master/malware/MALW_FUDCrypt.yar
tags: malware,file
file:
- extensions:
- all
matchers:
- type: word
part: raw
words:
- 'OcYjzPUtJkNbLOABqYvNbvhZf'
- 'gwiXxyIDDtoYzgMSRGMckRbJi'
- 'BclWgISTcaGjnwrzSCIuKruKm'
- 'CJyUSiUNrIVbgksjxpAMUkAJJ'
- 'fAMVdoPUEyHEWdxQIEJPRYbEN'
- 'CIGQUctdcUPqUjoucmcoffECY'
- 'wcZfHOgetgAExzSoWFJFQdAyO'
- 'DqYKDnIoLeZDWYlQWoxZnpfPR'
- 'MkhMoOHCbGUMqtnRDJKnBYnOj'
- 'sHEqLMGglkBAOIUfcSAgMvZfs'
- 'JtZApJhbFAIFxzHLjjyEQvtgd'
- 'IIQrSWZEMmoQIKGuxxwoTwXka'
# digest: 490a004630440220592c3b70dfa904542e21f7305ea058f5c1fbba366b172cf1dfe1f62756a6901702201b99722697eec8347e0a58f06062a071ebc749199a74d7b00aa1a07bba98e085:922c64590222798bb761d5b6d8e72950