Commit 3030082a by Yara Rules

Modified LinuxAESDDoS rule

Modified meta and conditions LinuxAESDDoS
commit: 02d7950cf9252f14dab229b000c451be1c08b6a2

thank you @nyx0
parent f21d677a
...@@ -9,8 +9,10 @@ import "pe" ...@@ -9,8 +9,10 @@ import "pe"
rule LinuxAESDDoS rule LinuxAESDDoS
{ {
meta: meta:
author = "@benkow_" Author = "@benkow_"
description = "http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3483" Date = "2014/09/12"
Description = "Strings inside"
Reference = "http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3483"
strings: strings:
$a = "3AES" $a = "3AES"
...@@ -18,10 +20,10 @@ rule LinuxAESDDoS ...@@ -18,10 +20,10 @@ rule LinuxAESDDoS
$c = "VERSONEX" $c = "VERSONEX"
condition: condition:
2 of ($a,$b,$c) 2 of them
} }
rule Linux_BillGates rule LinuxBillGates
{ {
meta: meta:
Author = "@benkow_" Author = "@benkow_"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment