We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 575f99d commit 073fad7Copy full SHA for 073fad7
data/yara/CAPE/NightshadeC2.yar
@@ -2,12 +2,13 @@ rule NightshadeC2
2
{
3
meta:
4
author = "YungBinary"
5
- description = "https://x.com/YungBinary/status/1963750193851179149"
+ description = "https://x.com/YungBinary/status/1963751038340534482"
6
hash = "963c012d56c62093d105ab5044517fdcce4ab826f7782b3e377932da1df6896d"
7
+ cape_type = "NightshadeC2 Payload"
8
strings:
9
$s1 = "keylog.txt" wide
10
$s2 = "--mute-audio --do-not-de-elevate" wide
11
$s3 = "MachineGuid" wide
12
condition:
13
uint16(0) == 0x5A4D and all of them
-}
14
+}
0 commit comments