Skip to content

R
rules
Unverified Commit 8fcbb5e5 by jovimon Committed by GitHub
Options

Move is__elf to MISC_Utils.yar

parent be0e0374
Showing with 0 additions and 11 deletions
malware/MALW_Mirai_Satori_ELF.yar
...@@ -24,17 +24,6 @@ private rule is__Mirai_gen7 { ...@@ -24,17 +24,6 @@ private rule is__Mirai_gen7 {
5 of them 5 of them
} }
private rule is__elf {
meta:
author = "@mmorenog,@yararules"
strings:
$header = { 7F 45 4C 46 }
condition:
$header at 0
}
private rule is__Mirai_Satori_gen { private rule is__Mirai_Satori_gen {
meta: meta:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment