Skip to content

R
rules
Commit 764a5208 by Marc Rivero López Committed by GitHub
Options

Update MALW_Bangat.yar

parent 6c10440b
Showing with 5 additions and 5 deletions
malware/MALW_Bangat.yar
...@@ -3,10 +3,9 @@ ...@@ -3,10 +3,9 @@
*/ */
import "pe" rule BangatCode
rule BangatCode : Bangat Family
{ {
meta: meta:
description = "Bangat code features" description = "Bangat code features"
author = "Seth Hardy" author = "Seth Hardy"
...@@ -20,8 +19,9 @@ rule BangatCode : Bangat Family ...@@ -20,8 +19,9 @@ rule BangatCode : Bangat Family
any of them any of them
} }
rule BangatStrings : Bangat Family rule BangatStrings
{ {
meta: meta:
description = "Bangat Identifying Strings" description = "Bangat Identifying Strings"
author = "Seth Hardy" author = "Seth Hardy"
...@@ -40,7 +40,7 @@ rule BangatStrings : Bangat Family ...@@ -40,7 +40,7 @@ rule BangatStrings : Bangat Family
all of ($lib*) or $file or $mc all of ($lib*) or $file or $mc
} }
rule Bangat : Family rule Bangat
{ {
meta: meta:
description = "Bangat" description = "Bangat"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment