| Path : /proc/3/task/3/cwd/usr/local/scan/lw-yara/includes/ |
| Current File : //proc/3/task/3/cwd/usr/local/scan/lw-yara/includes/perl-socks-proxy.yar |
rule perl_socks_proxy
{
meta:
author = "Brian Laskowski"
info = " perl socks proxy 05/21/18 "
strings:
$s1="/usr/bin/perl"
$s2="socks_bind"
$s3="socks_connect"
$s4="socks_do"
condition:
all of them
}