Commit 0e7465cd by mmorenog

Update THOR_HackTools.yar

parent fc0825cb
......@@ -116,21 +116,6 @@ rule HackTool_Samples {
1 of them
}
rule HackTool_Producers {
meta: description = "Hacktool Producers String" threat_level = 5 score = 50
strings:
$a1 = "www.oxid.it"
$a2 = "www.analogx.com"
$a3 = "ntsecurity.nu"
$a4 = "gentilkiwi.com"
$a6 = "Marcus Murray"
condition:
1 of ($a*) and
not extension contains ".ini" and
not extension contains ".xml" and
not extension contains ".sqlite"
}
/* Disclosed hack tool set */
rule Fierce2
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment