Update yara/[X]Bifrost-yara-20250112.yar

2025-01-13 10:22:17 -05:00
parent 234709eea5
commit c0d7d38251
1 changed files with 3 additions and 0 deletions
--- a/yara/[X]Bifrost-yara-20250112.yar
+++ b/yara/[X]Bifrost-yara-20250112.yar
@ -0,0 +1,15 @@
+[X]Updated
+```
+Bifrost_IOCs {
+  meta:
+    creator = "Cpl Iverson"
+    date = "2025-01-12"
+    description = "Suspicious IPs, Hashes, and Domains"
+    apt_group = "BlackTech"
+  strings:
+    $ip_107_191_61_247 = "107.191.61.247"
+    $md5_8fd3925dadf37bebcc8844214f2bcd18 = "8fd3925dadf37bebcc8844214f2bcd18"
+  condition:
+    any of them
+}
+```