Skip to content

R
rules
Commit 7d0e0a15 by mmorenog Committed by GitHub
Options

Update APT_DeputyDog_Fexel.yar

parent 747c3689
Showing with 3 additions and 4 deletions
malware/APT_DeputyDog_Fexel.yar
...@@ -4,7 +4,7 @@ ...@@ -4,7 +4,7 @@
import "pe" import "pe"
rule APT_DeputyDog_Fexel rule APT_DeputyDog_Fexel : APT DeputyDog
{ {
meta: meta:
author = "ThreatConnect Intelligence Research Team" author = "ThreatConnect Intelligence Research Team"
...@@ -18,7 +18,7 @@ condition: ...@@ -18,7 +18,7 @@ condition:
any of them any of them
} }
rule APT_DeputyDog rule APT_DeputyDog : APT DeputyDog
{ {
meta: meta:
Author = "FireEye Labs" Author = "FireEye Labs"
...@@ -32,4 +32,4 @@ rule APT_DeputyDog ...@@ -32,4 +32,4 @@ rule APT_DeputyDog
condition: condition:
($mz at 0) and $a ($mz at 0) and $a
} }
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment