Common Information
Type Value
Value
rule ReportGenerate_jsp {
	strings:
		$s1 = "decrypt(fpath)"
		$s2 = "decrypt(fcontext)"
		$s3 = "decrypt(commandEnc)"
		$s4 = "upload failed!"
		$s5 = "sevck"
		$s6 = "newid"
	condition:
		filesize < 15KB and 4 of them
}
Category
Type Yara Rule
Misp Type
Description
Details Published Attributes CTI Title
Details Website 2021-09-16 39 APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus | CISA