| Path : /usr/local/scan/lw-yara/includes/ |
| Current File : //usr/local/scan/lw-yara/includes/miner.yar |
rule crypto_miner
{
meta:
author= "Brian Laskowski"
info= " Detected a cryptomining exe"
strings:
$miner = "stratum+tcp"
condition:
$miner
}