/
lw-rules_index.yar
51 lines (48 loc) · 1.88 KB
/
lw-rules_index.yar
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
include "./includes/FOPO.yar"
include "./includes/cache-mailer.yar"
include "./includes/mailer1.yar"
include "./includes/miner.yar"
include "./includes/WShell_PHP_Anuna.yar"
include "./includes/eitest1.yar"
include "./includes/drupal-CPREA57Webshell.yar"
include "./includes/php-gen-0.yar"
include "./includes/miner-config.yar"
include "./includes/crypto-jacking-0.yar"
include "./includes/crypto-jacking-1.yar"
include "./includes/drupalgeddon-0.yar"
include "./includes/CPR4616Webshell.yar"
include "./includes/PHP-Mailer-K.yar"
include "./includes/indo-exploit.yar"
include "./includes/cpanel-brute.yar"
include "./includes/symlink-tool.yar"
include "./includes/phishing-actors.yar"
include "./includes/well-phishing0001.yar"
include "./includes/php-gen-1.yar"
include "./includes/alfa-shell.yar"
include "./includes/alfa-perl.yar"
include "./includes/me0w-js-miner.yar"
include "./includes/drupal-index-ico-injection.yar"
include "./includes/wordpress-injection-1.yar"
include "./includes/wordpress-injection-2.yar"
include "./includes/rfi-perl-bot.yar"
include "./includes/perl-socks-proxy.yar"
include "./includes/data_chaos_backdoor.yar"
include "./includes/dark-shell.yar"
include "./includes/media-shell.yar"
include "./includes/052618-drupalsite.yar"
include "./includes/annizod-xmr-miner.yar"
include "./includes/4700up-jpg.yar"
include "./includes/class_12371_uploader.yar"
include "./includes/scanner_obfuscated_shell.yar"
include "./includes/052918_case109.yar"
include "./includes/dedsec-symlinker.yar"
include "./includes/drupal.js-coinhive.yar"
include "./includes/netscrape_shell.yar"
include "./includes/day_uploader_shell.yar"
include "./includes/luk_miner.yar"
include "./includes/js-malvertising.yar"
include "./includes/shells_119.yar"
include "./includes/pass_shell.yar"
include "./includes/case116_a_miner_persistence.yar"
include "./includes/y_php_shell.yar"
include "./includes/prowli.yar"