Update RANSOM_Petya.yar

8579a7ee · @Antelox · GitHub · 79314fcb · 8579a7ee
Commit 8579a7ee authored Oct 18, 2016 by @Antelox Committed by GitHub Oct 18, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 3 deletions

RANSOM_Petya.yar malware/RANSOM_Petya.yar +3 -3

No files found.
--- a/malware/RANSOM_Petya.yar
+++ b/malware/RANSOM_Petya.yar
@@ -37,9 +37,9 @@ meta:
    author = "CCN-CERT"
    version = "1.0"
 strings:
-    $ = { C1 C8 14 2B F0 03 F0 2B F0 03 F0 C1 C0 14 03 C2 }
-    $ = { 46 F7 D8 81 EA 5A 93 F0 12 F7 DF C1 CB 10 81 F6 }
-    $ = { 0C 88 B9 07 87 C6 C1 C3 01 03 C5 48 81 C3 A3 01 00 00 }
+    $a1 = { C1 C8 14 2B F0 03 F0 2B F0 03 F0 C1 C0 14 03 C2 }
+    $a2 = { 46 F7 D8 81 EA 5A 93 F0 12 F7 DF C1 CB 10 81 F6 }
+    $a3 = { 0C 88 B9 07 87 C6 C1 C3 01 03 C5 48 81 C3 A3 01 00 00 }
 condition:
    all of them
 }