Commit ba825078 by mmorenog Committed by GitHub

Update crypto.yar

parent 5b6ac979
...@@ -143,7 +143,7 @@ rule WHIRLPOOL_Constants : crypto { ...@@ -143,7 +143,7 @@ rule WHIRLPOOL_Constants : crypto {
2 of them 2 of them
} }
rule DarkEYEv3_Cryptor : crypto { rule DarkEYEv3_Cryptor_1 : crypto {
meta: meta:
description = "Rule to detect DarkEYEv3 encrypted executables (often malware)" description = "Rule to detect DarkEYEv3 encrypted executables (often malware)"
author = "Florian Roth" author = "Florian Roth"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment