Update and rename malware/APT_Danti_svcmondr.yar to CVE_Rules/CVE-2015-2545.yar

9864ba5c · mmorenog · GitHub · 19c2d036 · 9864ba5c
Commit 9864ba5c authored Jul 20, 2016 by mmorenog Committed by GitHub Jul 20, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 1 deletions

CVE-2015-2545.yar CVE_Rules/CVE-2015-2545.yar +1 -1

No files found.
--- a/malware/APT_Danti_svcmondr.yar
+++ b/malware/APT_Danti_svcmondr.yar
@@ -58,7 +58,7 @@ rule Mal_http_EXE : Trojan {
 		( uint16(0) == 0x5a4d and filesize < 2000KB and ( 1 of ($x*) and 2 of ($s*) ) ) or ( 3 of ($x*) )
 }

-rule Mal_PotPlayer_DLL {
+rule Mal_PotPlayer_DLL : dll {
 	meta:
 		description = "Detects a malicious PotPlayer.dll"
 		author = "Florian Roth"