Unverified Commit 75f29f14 by lcol3117 Committed by GitHub

fix typo, there is a space in the reference

https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-august-31st-2018-devs-on-vacation/
is mentioned as the reference, and the picture has a space between “the” and “decryption”.
parent 33dd74c8
...@@ -12,7 +12,7 @@ rule screenlocker_acroware { ...@@ -12,7 +12,7 @@ rule screenlocker_acroware {
$s2 = "All your Personal Data got encrypted and the decryption key is stored on a hidden" fullword ascii $s2 = "All your Personal Data got encrypted and the decryption key is stored on a hidden" fullword ascii
$s3 = "alphaoil@mail2tor.com any try of removing this Ransomware will result in an instantly " fullword ascii $s3 = "alphaoil@mail2tor.com any try of removing this Ransomware will result in an instantly " fullword ascii
$s4 = "HKEY_CURRENT_USER\\SoftwareE\\Microsoft\\Windows\\CurrentVersion\\Run" fullword wide $s4 = "HKEY_CURRENT_USER\\SoftwareE\\Microsoft\\Windows\\CurrentVersion\\Run" fullword wide
$s5 = "webserver, after 72 hours thedecryption key will get removed and your personal" fullword ascii $s5 = "webserver, after 72 hours the decryption key will get removed and your personal" fullword ascii
condition: condition:
( uint16(0) == 0x5a4d and filesize < 2000KB ) and all of them ( uint16(0) == 0x5a4d and filesize < 2000KB ) and all of them
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment