Skip to content

R
rules
Commit 13be6095 by mmorenog Committed by GitHub
Options

Rename DirtJumper.yar to MALW_DirtJumper.yar

parent d4a22878
Showing with 1 additions and 2 deletions
malware/DirtJumper.yar → malware/MALW_DirtJumper.yar
...@@ -82,4 +82,4 @@ rule DirtJumper_drive3 ...@@ -82,4 +82,4 @@ rule DirtJumper_drive3
$drive3 = "99=1" $drive3 = "99=1"
condition: condition:
4 of ($cmd*) and all of ($str*) and all of ($newver*) and $drive3 4 of ($cmd*) and all of ($str*) and all of ($newver*) and $drive3
} }
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment