Files
nuclei-templates/file/malware/cythosia-malware.yaml
2024-12-01 13:57:55 +00:00

17 lines
555 B
YAML

id: cythosia-malware
info:
name: Cythosia Malware - Detect
author: daffainfo
severity: info
reference: https://github.com/Yara-Rules/rules/blob/master/malware/MALW_Cythosia.yar
tags: malware,file
file:
- extensions:
- all
matchers:
- type: word
part: raw
words:
- 'HarvesterSocksBot.Properties.Resources'
# digest: 4b0a004830460221009520f4155e7e1a81efcadf91a7d2e0b613548ba2a59ea9b02d55a262d64ad00f022100e0001b3281ec494b9aa76c8d344d0c2f1475a66a965815c4524478d6baffbf3e:922c64590222798bb761d5b6d8e72950