Skip to content

R
rules
Commit 07b8eecd by j0sm1
Options

Updated Turla rules 

Updated Turla rules
parent 92e6def7
Showing with 0 additions and 1 deletions
malware/Turla.yar
...@@ -11,7 +11,6 @@ rule WaterBug_turla_dll ...@@ -11,7 +11,6 @@ rule WaterBug_turla_dll
description = "Symantec Waterbug Attack - Trojan Turla DLL" description = "Symantec Waterbug Attack - Trojan Turla DLL"
author = "Symantec Security Response" author = "Symantec Security Response"
date = "22.01.2015" date = "22.01.2015"
reference = "http://t.co/rF35OaAXrl"
strings: strings:
$a = /([A-Za-z0-9]{2,10}_){,2}Win32\.dll\x00/ $a = /([A-Za-z0-9]{2,10}_){,2}Win32\.dll\x00/
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment