Skip to content

R
rules
Commit 79314fcb by @Antelox Committed by GitHub
Options

Fixed syntax error

parent 153a6771
Showing with 2 additions and 2 deletions
malware/RANSOM_Petya.yar
...@@ -31,10 +31,10 @@ rule Petya_Ransomware { ...@@ -31,10 +31,10 @@ rule Petya_Ransomware {
uint16(0) == 0x5a4d and filesize < 500KB and $a1 and 3 of ($s*) uint16(0) == 0x5a4d and filesize < 500KB and $a1 and 3 of ($s*)
} }
rule Ransom.Petya { rule Ransom_Petya {
meta: meta:
description = "Regla para detectar Ransom.Petya con md5 AF2379CC4D607A45AC44D62135FB7015" description = "Regla para detectar Ransom.Petya con md5 AF2379CC4D607A45AC44D62135FB7015"
author = "CCN-CERT”" author = "CCN-CERT"
version = "1.0" version = "1.0"
strings: strings:
$ = { C1 C8 14 2B F0 03 F0 2B F0 03 F0 C1 C0 14 03 C2 } $ = { C1 C8 14 2B F0 03 F0 2B F0 03 F0 C1 C0 14 03 C2 }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment