100 Days of YARA – Day 26: Merlin C2

Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go. This C2 software offers some unique features such as operating over the QUIC protocol and compatibility with the Mythic Framework.

https://github.com/Ne0nd0g/merlin

I encountered this C2 while playing Pros versus Joes CTF.

rule merlin
{
	meta:
		description = "https://github.com/Ne0nd0g/merlin"

	strings:
		$a = "github.com/Ne0nd0g/merlin"

	condition:
		any of them
}

YARA Rules Index

One thought on “100 Days of YARA – Day 26: Merlin C2

  1. Pingback: Week 03 – 2022 – This Week In 4n6

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s