Linux GobRAT Backdoor Detection
This rule detects the Linux GobRAT backdoor by identifying specific byte patterns associated with its functions for getting local IP addresses, MAC addresses, handling TCP network communication, and managing telnet tasks. The rule specifically targets ELF executable files.
YARA
