Update and rename Android_RuMMS to Android_RuMMS.yar

08676818 · mmorenog · f56beb66 · 08676818
Commit 08676818 authored May 04, 2016 by mmorenog
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletions

Android_RuMMS.yar Mobile_Malware/Android_RuMMS.yar +4 -1

No files found.
--- a/Mobile_Malware/Android_RuMMS
+++ b/Mobile_Malware/Android_RuMMS
+/*
+    This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as    long as you use it under this license.
+*/
+
 import "androguard"

 rule Android_RuMMS
@@ -10,7 +14,6 @@ rule Android_RuMMS
 		source = "https://www.fireeye.com/blog/threat-research/2016/04/rumms-android-malware.html"

 	condition:
-		all of ($string_*) and
 		androguard.package_name("org.starsizew") or
 		androguard.package_name("com.tvone.untoenynh") or
 		androguard.package_name("org.zxformat") and