| Path : /proc/3/task/3/cwd/usr/local/scan/lw-yara/includes/ |
| Current File : //proc/3/task/3/cwd/usr/local/scan/lw-yara/includes/miner.yar |
rule crypto_miner
{
meta:
author= "Brian Laskowski"
info= " Detected a cryptomining exe"
strings:
$miner = "stratum+tcp"
condition:
$miner
}