YARA unknown stable yara

Android_pinkLocker [Android]

Yara detection for Android Locker app named Pink Club

View Source

Detection Logic

androguard.url(/lineout\.pw/) or 
		androguard.certificate.sha1("D88B53449F6CAC93E65CA5E224A5EAD3E990921E") or
		androguard.permission(/android.permission.INTERNET/) and
		androguard.permission(/android.permission.DISABLE_KEYGUARD/) and
		all of ($str_*)

Field Validations

Loading…

Comments (0)

Loading comments...