[ SEA-GHOST MINI SHELL]

Path : /usr/local/scan/lw-yara/includes/
FILE UPLOADER :
Current File : //usr/local/scan/lw-yara/includes/perl-socks-proxy.yar

rule perl_socks_proxy
{

    meta:
       author = "Brian Laskowski"
       info = " perl socks proxy 05/21/18 "

    strings:
    
	$s1="/usr/bin/perl"
	$s2="socks_bind"
	$s3="socks_connect"
	$s4="socks_do"

    condition:
    all of them
}


SEA-GHOST - SHELL CODING BY SEA-GHOST