Skip to content

R
rules
Commit 0364f63b by Ryan B
Options

change file type comment from exe to jar for JavaDropper : RAT 

Signed-off-by: Ryan B <randomrhythm@rhythmengineering.com>
parent 6636eafa
Showing with 1 additions and 1 deletions
malware/RAT_Ratdecoders.yar
...@@ -279,7 +279,7 @@ rule JavaDropper : RAT ...@@ -279,7 +279,7 @@ rule JavaDropper : RAT
date = "2015/10" date = "2015/10"
ref = "http://malwareconfig.com/stats/AlienSpy" ref = "http://malwareconfig.com/stats/AlienSpy"
maltype = "Remote Access Trojan" maltype = "Remote Access Trojan"
filetype = "exe" filetype = "jar"
strings: strings:
$jar = "META-INF/MANIFEST.MF" $jar = "META-INF/MANIFEST.MF"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment