Common Information
Type Value
Value
rule EncryptJSP {
	strings:
		$s1 = "AEScrypt"
		$s2 = "AES/CBC/PKCS5Padding"
		$s3 = "SecretKeySpec"
		$s4 = "FileOutputStream"
		$s5 = "getParameter"
		$s6 = "new ProcessBuilder"
		$s7 = "new BufferedReader"
		$s8 = "readLine()"
	condition:
		filesize < 15KB and 6 of them
}
Category
Type Yara Rule
Misp Type
Description
Details Published Attributes CTI Title
Details Website 2021-09-16 39 APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus | CISA