Skip to content

R
rules
Commit 81049e94 by Daxda Committed by GitHub
Options

Update MW_Ransomware_777.yar

parent 30ac6e7d
Showing with 1 additions and 4 deletions
malware/MW_Ransomware_777.yar
rule legion_777 rule legion_777
{ {
meta: meta:
author = "Daxda (https://github.com/Daxda)" author = "Daxda (https://github.com/Daxda)"
date 2016/6/6 date = "2016/6/6"
description = "Detects an UPX-unpacked .777 ransomware binary." description = "Detects an UPX-unpacked .777 ransomware binary."
category = "Ransomware" category = "Ransomware"
sample = "SHA256: 14d22359e76cf63bf17268cad24bac03663c8b2b8028b869f5cec10fe3f75548" sample = "SHA256: 14d22359e76cf63bf17268cad24bac03663c8b2b8028b869f5cec10fe3f75548"
...@@ -19,6 +18,4 @@ rule legion_777 ...@@ -19,6 +18,4 @@ rule legion_777
condition: condition:
4 of ($s*) 4 of ($s*)
} }
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment