Skip to content

TrumpBot Malware - Detect

ID: trumpbot-malware

Severity: info

Author: daffainfo

Tags: malware,file

id: trumpbot-malware
info:
name: TrumpBot Malware - Detect
author: daffainfo
severity: info
reference: https://github.com/Yara-Rules/rules/blob/master/malware/MALW_Trumpbot.yar
tags: malware,file
file:
- extensions:
- all
matchers:
- type: word
part: raw
words:
- "trumpisdaddy"
- "198.50.154.188"
condition: and
# digest: 4a0a0047304502206913a85e26a6ad604d8458e1c2dbc0b88771b5e68eb0d692c449f08b51609f9e022100d78f06885a8f2ac83f106fe895489d30825be71facc5f0460142a91e3c4fb482:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "file/malware/trumpbot-malware.yaml"

View on Github