YARA unknown stable yara

Android_Triada [Android]

This rule try to detects Android.Triada.Malware

View Source

Detection Logic

all of ($string_*) and
		androguard.permission(/android.permission.KILL_BACKGROUND_PROCESSES/) and
		androguard.permission(/android.permission.SYSTEM_ALERT_WINDOW/) and
		androguard.permission(/android.permission.GET_TASKS/)

Field Validations

Loading…

Comments (0)

Loading comments...