Commit bcc4dc90 by mmorenog

Update EMAIL_Cryptowall.yar

parent 380525b3
......@@ -10,7 +10,7 @@
Created in PhishMe's Triage on September 14, 2015 2:33 PM
*/
rule CryptoWall_Resume_phish
rule CryptoWall_Resume_phish : mail
{
meta:
Author = "http://phishme.com/"
......@@ -41,7 +41,7 @@ rule CryptoWall_Resume_phish
Created in PhishMe's Triage on September 14, 2015 2:35 PM
*/
rule docx_macro
rule docx_macro : mail
{
strings:
$header="PK"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment