Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
R
rules
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
fact-depend
rules
Commits
a8fbcc4c
Unverified
Commit
a8fbcc4c
authored
Jun 22, 2020
by
Jaume Martin
Committed by
GitHub
Jun 22, 2020
Browse files
Options
Browse Files
Download
Plain Diff
Merge pull request #379 from spaddex/master
Renamed poetRAT to avoid dupes + adjusted criteria
parents
b5a4ec3f
4c8e2a5f
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
5 additions
and
7 deletions
+5
-7
RAT_PoetRATDoc.yar
malware/RAT_PoetRATDoc.yar
+2
-3
RAT_PoetRATPython.yar
malware/RAT_PoetRATPython.yar
+3
-4
No files found.
malware/RAT_PoetRATDoc.yar
View file @
a8fbcc4c
rule PoetRat
rule PoetRat
_Doc
{
meta:
Author = "Nishan Maharjan"
...
...
@@ -22,4 +22,4 @@ rule PoetRat
$exe = ".exe"
condition:
all of them
}
\ No newline at end of file
}
malware/RAT_PoetRATPython.yar
View file @
a8fbcc4c
rule PoetRat
rule PoetRat
_Python
{
meta:
Author = "Nishan Maharjan"
...
...
@@ -15,5 +15,5 @@ rule PoetRat
$pipe_out = "Abibliophobia23"
$shot = "shot_{0}_{1}.png"
condition:
any of them
}
\ No newline at end of file
3 of them
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment