YARA unknown stable yara

bankbot_polish_banks [Android]

BankBot/Mazain attacking polish banks

View Source

Detection Logic

all of ($s*) and 1 of ($bank*) and 
        androguard.permission(/android.permission.INTERNET/) and 
        androguard.permission(/android.permission.WAKE_LOCK/) and
        androguard.permission(/android.permission.READ_EXTERNAL_STORAGE/) and
        androguard.permission(/android.permission.RECEIVE_MMS/) and
        androguard.permission(/android.permission.READ_SMS/) and
        androguard.permission(/android.permission.RECEIVE_SMS/)

Field Validations

Loading…

Comments (0)

Loading comments...