Skip to content

R
rules
Commit 7599da16 by mmorenog
Options

Update Adwind_JAR_PACKB.yar

parent d913ad44
Showing with 1 additions and 1 deletions
malware/Adwind_JAR_PACKB.yar
...@@ -6,7 +6,7 @@ rule Adwind_JAR_PACKB { ...@@ -6,7 +6,7 @@ rule Adwind_JAR_PACKB {
meta: meta:
author = "Vitaly Kamluk, Vitaly.Kamluk@kaspersky.com" author = "Vitaly Kamluk, Vitaly.Kamluk@kaspersky.com"
reference = "https://securelist.com/securelist/files/2016/02/KL_AdwindPublicReport_2016.pdf" reference = "https://securelist.com/securelist/files/2016/02/KL_AdwindPublicReport_2016.pdf"
last_modi ed = "2015-11-30" last_modified = "2015-11-30"
strings: strings:
$c1 = "META-INF/MANIFEST.MF" ascii $c1 = "META-INF/MANIFEST.MF" ascii
$c2 = "main/Start.class" ascii $c2 = "main/Start.class" ascii
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment