Update RAT_Nanocore.yar

93ffae2a · mmorenog · GitHub · a7f62a23 · 93ffae2a
Commit 93ffae2a authored Nov 15, 2016 by mmorenog Committed by GitHub Nov 15, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 0 deletions

RAT_Nanocore.yar malware/RAT_Nanocore.yar +1 -0

No files found.
--- a/malware/RAT_Nanocore.yar
+++ b/malware/RAT_Nanocore.yar
@@ -66,3 +66,4 @@ rule Nanocore_RAT_Sample_2 {
 		$s3 = "Cy4tOtTmpMtTHVFOrR" fullword ascii
 	condition:
 		uint16(0) == 0x5a4d and filesize < 40KB and all of ($s*)
+}