Permalink
Browse files

new cryptojacking sigs

  • Loading branch information...
brian
brian committed Jul 13, 2018
1 parent 0727d3b commit 99dfe2b3d0afddfa07931eb0f646784fe5e32eef
Showing with 24 additions and 0 deletions.
  1. +24 −0 cryptojacking_signatures.yar
@@ -27,6 +27,30 @@ rule crypto_jacking_signatures {
$s10 = "webmine.pro"
$s11 = "miner.start"
$s12 = "allfontshere.press"
$s13 = "freecontent.bid"
$s14 = "freecontent.date"
$s15 = "freecontent.faith"
$s16 = "freecontent.party"
$s17 = "freecontent.science"
$s18 = "freecontent.stream"
$s19 = "freecontent.trade"
$s20 = "hostingcloud.accountant"
$s21 = "hostingcloud.bid"
$s22 = "hostingcloud.date"
$s23 = "hostingcloud.download"
$s24 = "hostingcloud.faith"
$s25 = "hostingcloud.loan"
$s26 = "jshosting.bid"
$s27 = "jshosting.date"
$s28 = "jshosting.download"
$s29 = "jshosting.loan"
$s30 = "jshosting.party"
$s31 = "jshosting.racing"
$s32 = "jshosting.review"
$s33 = "jshosting.stream"
$s34 = "jshosting.trade"
$s35 = "jshosting.win"
condition:
any of them
}

0 comments on commit 99dfe2b

Please sign in to comment.