Common Information
Type Value
Value
rule JsOutProx_v2 {
	meta:
		description = "Yara Rule for JsOutProx_v2"
		author = "Yoroi Malware Zlab"
		last_updated = "2021_07_29"
		tlp = "white"
		category = "informational"
	strings:
		$s1 = /uA\[[a-zA-Z]/ ascii wide
		$s2 = /u[A-Z]\(/ ascii wide
	condition:
		#s1 > 800 and #s2 > 4000 and (filesize > 1500KB)
}
Category
Type Yara Rule
Misp Type
Description
Details Published Attributes CTI Title
Details Website 2021-08-31 30 Financial Institutions in the Sight of New JsOutProx Attack Waves - Yoroi