| Path : /proc/2/task/2/cwd/usr/local/scan/lw-yara/includes/ |
| Current File : //proc/2/task/2/cwd/usr/local/scan/lw-yara/includes/crypto-jacking-1.yar |
rule bad_packets_crypto_jacking_1
{
meta:
author= "Brian Laskowski"
info= " https://badpackets.net/large-cryptojacking-campaign-targeting-vulnerable-drupal-websites/ "
strings:
$a = "var dZ1= window"
$b = "var ZBRnO2= window"
condition:
all of them
}