Skip to content

Dexter Malware - Detect

ID: dexter-malware

Severity: info

Author: daffainfo

Tags: malware,file

id: dexter-malware
info:
name: Dexter Malware - Detect
author: daffainfo
severity: info
reference:
- https://github.com/Yara-Rules/rules/blob/master/malware/MALW_Dexter.yar
- http://goo.gl/oBvy8b
tags: malware,file
file:
- extensions:
- all
matchers:
- type: word
part: raw
words:
- 'Java Security Plugin'
- '%s\\%s\\%s.exe'
- 'Sun Java Security Plugin'
- '\\Internet Explorer\\iexplore.exe'
condition: and
# digest: 4a0a00473045022100c9cfd36b8ab11c5b1dc9a0b81012344312e7e3f01ad9feb9980e094bed079d8c0220680c2ad75c6def0202a9ce3f57b55819ebaec4655d4e309468ab5f0e808ee76e:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "file/malware/dexter-malware.yaml"

View on Github