Skip to content

R
rules
Commit 6f74e6fe by mmorenog Committed by GitHub
Options

Update and rename BlackShades.yar to RAT_BlackShades.yar

parent eed619e0
Showing with 2 additions and 2 deletions
malware/BlackShades.yar → malware/RAT_BlackShades.yar
...@@ -5,7 +5,7 @@ ...@@ -5,7 +5,7 @@
import "pe" import "pe"
rule BlackShades_3 : Trojan rule BlackShades_3 : Trojan RAT
{ {
meta: meta:
description = "BlackShades RAT" description = "BlackShades RAT"
...@@ -62,7 +62,7 @@ rule BlackShades_3 : Trojan ...@@ -62,7 +62,7 @@ rule BlackShades_3 : Trojan
10 of ($mod*) or 10 of ($tmr*) 10 of ($mod*) or 10 of ($tmr*)
} }
rule BlackShades2 : Trojan rule BlackShades2 : Trojan RAT
{ {
meta: meta:
author="Kevin Falcoz" author="Kevin Falcoz"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment