Commit 2a44a845 by Marc Rivero López Committed by GitHub

Update MALW_Citadel.yar

parent 24029a3a
......@@ -2,8 +2,10 @@
This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license.
*/
rule citadel13xy : banker memory
rule citadel13xy
{
meta:
author = "Jean-Philippe Teissier / @Jipe_"
description = "Citadel 1.5.x.y trojan banker"
......@@ -25,8 +27,9 @@ rule citadel13xy : banker memory
3 of them
}
rule Citadel_Malware : Hexed nss3 Firefox
rule Citadel_Malware
{
meta:
author = "xylitol@temari.fr"
date = "2015-10-08"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment