Update yara/[X]TsCookiev2-yara-20250112.yar

2025-01-13 10:45:50 -05:00
parent a46fb38315
commit 6feab48471
1 changed files with 3 additions and 0 deletions
--- a/yara/[X]TsCookiev2-yara-20250112.yar
+++ b/yara/[X]TsCookiev2-yara-20250112.yar
@ -0,0 +1,16 @@
+[X] Updated
+```
+TsCookiev2_IOCs {
+  meta:
+    creator = "Cpl Iverson"
+    date = "2025-01-12"
+    description = "Suspicious IPs, Hashes, and Domains"
+    apt_group = "BlackTech"
+  strings:
+    $sha256_fc863fbd = "fc863fbd71e22c99eaa2b1b0eb72d806cedeb536213e600afb03f0fbea9d2bb3"
+    $domain_home_mwbsys_org = "home.mwbsys.org"
+    $domain_app_dynamicrosoft_com = "app.dynamicrosoft.com"
+  condition:
+    any of them
+}
+```