Volatility3 MCP Server

/* This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license. */ import "androguard" rule Android_Dogspectus { meta: author = "Jacob Soo Lead Re" date = "20-July-2016" description = "This rule try to detects Dogspectus" source = "https://www.bluecoat.com/security-blog/2016-04-25/android-exploit-delivers-dogspectus-ransomware" condition: androguard.activity(/PanickedActivity/i) and androguard.permission(/android.permission.RECEIVE_BOOT_COMPLETED/i) and androguard.permission(/android.permission.INTERNET/i) and androguard.permission(/android.permission.WAKE_LOCK/i) }