YARA unknown stable yara

Android_Switcher [Android]

This rule detects Android wifi Switcher variants

View Source

Detection Logic

androguard.certificate.sha1("2421686AE7D976D19AB72DA1BDE273C537D2D4F9") or 
		(androguard.permission(/android.permission.INTERNET/) and
		androguard.permission(/android.permission.ACCESS_WIFI_STATE/) and 
		($dns_2 or $dns_3 or $dns_4) and all of ($str_*))

Field Validations

Loading…

Comments (0)

Loading comments...