id: ironpanda-malware-hash
info:
  name: Iron Panda Malware Hash - Detect
  author: pussycat0x
  severity: info
  description: Iron Panda Malware
  reference:
    - https://goo.gl/E4qia9
  tags: malware,IronPanda

file:
  - extensions:
      - all

    matchers:
      - type: dsl
        dsl:
          - "sha256(raw) == 'a0cee5822ddf254c254a5a0b7372c9d2b46b088a254a1208cb32f5fe7eca848a'"
          - "sha256(raw) == 'a89c21dd608c51c4bf0323d640f816e464578510389f9edcf04cd34090decc91'"
          - "sha256(raw) == '5cd2af844e718570ae7ba9773a9075738c0b3b75c65909437c43201ce596a742'"
          - "sha256(raw) == '0d6da946026154416f49df2283252d01ecfb0c41c27ef3bc79029483adc2240c'"
        condition: or
# digest: 4a0a0047304502200f7fbebb687e82ffa4cdc49d35ade3ff4731508fb7779fb0c3c1965b82a94ad2022100e282954028ce35efa08ba9599f998165371f9359deca641eee305a329e06cab5:922c64590222798bb761d5b6d8e72950