Commit 2fb9a5ac by Yara Rules

Modified LinuxMrBlack rule

Modified LinuxMrBlack rule
parent be2ca124
...@@ -58,8 +58,10 @@ rule LinuxElknot ...@@ -58,8 +58,10 @@ rule LinuxElknot
rule LinuxMrBlack rule LinuxMrBlack
{ {
meta: meta:
author = "@benkow_" Author = "@benkow_"
description = "http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3483" Date = "2014/09/12"
Description = "Strings inside"
Reference = "http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3483"
strings: strings:
$a = "Mr.Black" $a = "Mr.Black"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment