Commit 08676818 by mmorenog

Update and rename Android_RuMMS to Android_RuMMS.yar

parent f56beb66
/*
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
import "androguard"
rule Android_RuMMS
......@@ -10,7 +14,6 @@ rule Android_RuMMS
source = "https://www.fireeye.com/blog/threat-research/2016/04/rumms-android-malware.html"
condition:
all of ($string_*) and
androguard.package_name("org.starsizew") or
androguard.package_name("com.tvone.untoenynh") or
androguard.package_name("org.zxformat") and
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment