Commit 8c555a1d by j0sm1

Update GlassRAT.yar - Syntax error

Syntax Error.
parent f9fcca17
...@@ -3,15 +3,15 @@ ...@@ -3,15 +3,15 @@
long as you use it under this license. long as you use it under this license.
*/ */
rule glassrat rule glassrat
meta:
author = "Brian Wallace @botnet_hunter"
{ {
strings: meta:
author = "Brian Wallace @botnet_hunter"
strings:
$a = "PostQuitMessage" $a = "PostQuitMessage"
$b = "pwlfnn10,gzg" $b = "pwlfnn10,gzg"
$c = "update.dll" $c = "update.dll"
$d = "_winver" $d = "_winver"
condition: condition:
all of them all of them
} }
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment