Skip to content

R
rules
Commit 3a235cb4 by mmorenog Committed by GitHub
Options

Update and rename ZeroAcces_EK.yar to EK_ZeroAcces.yar

parent 2b66c5b3
Showing with 7 additions and 7 deletions
Exploit-Kits/ZeroAcces_EK.yar → Exploit-Kits/EK_ZeroAcces.yar
rule zeroaccess_css rule zeroaccess_css : EK
{ {
meta: meta:
author = "Josh Berry" author = "Josh Berry"
...@@ -30,7 +30,7 @@ strings: ...@@ -30,7 +30,7 @@ strings:
condition: condition:
18 of them 18 of them
} }
rule zeroaccess_css2 rule zeroaccess_css2 : EK css
{ {
meta: meta:
author = "Josh Berry" author = "Josh Berry"
...@@ -55,7 +55,7 @@ strings: ...@@ -55,7 +55,7 @@ strings:
condition: condition:
11 of them 11 of them
} }
rule zeroaccess_htm rule zeroaccess_htm : EK html
{ {
meta: meta:
author = "Josh Berry" author = "Josh Berry"
...@@ -85,7 +85,7 @@ strings: ...@@ -85,7 +85,7 @@ strings:
condition: condition:
16 of them 16 of them
} }
rule zeroaccess_js rule zeroaccess_js : EK js
{ {
meta: meta:
author = "Josh Berry" author = "Josh Berry"
...@@ -117,7 +117,7 @@ strings: ...@@ -117,7 +117,7 @@ strings:
condition: condition:
18 of them 18 of them
} }
rule zeroaccess_js2 rule zeroaccess_js2 : EK js
{ {
meta: meta:
author = "Josh Berry" author = "Josh Berry"
...@@ -149,7 +149,7 @@ strings: ...@@ -149,7 +149,7 @@ strings:
condition: condition:
18 of them 18 of them
} }
rule zeroaccess_js3 rule zeroaccess_js3 : EK js
{ {
meta: meta:
author = "Josh Berry" author = "Josh Berry"
...@@ -178,7 +178,7 @@ strings: ...@@ -178,7 +178,7 @@ strings:
condition: condition:
15 of them 15 of them
} }
rule zeroaccess_js4 rule zeroaccess_js4 : EK js
{ {
meta: meta:
author = "Josh Berry" author = "Josh Berry"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment