Skip to content

R
rules
Commit bcc4dc90 by mmorenog
Options

Update EMAIL_Cryptowall.yar

parent 380525b3
Showing with 2 additions and 2 deletions
email/EMAIL_Cryptowall.yar
...@@ -10,7 +10,7 @@ ...@@ -10,7 +10,7 @@
Created in PhishMe's Triage on September 14, 2015 2:33 PM Created in PhishMe's Triage on September 14, 2015 2:33 PM
*/ */
rule CryptoWall_Resume_phish rule CryptoWall_Resume_phish : mail
{ {
meta: meta:
Author = "http://phishme.com/" Author = "http://phishme.com/"
...@@ -41,7 +41,7 @@ rule CryptoWall_Resume_phish ...@@ -41,7 +41,7 @@ rule CryptoWall_Resume_phish
Created in PhishMe's Triage on September 14, 2015 2:35 PM Created in PhishMe's Triage on September 14, 2015 2:35 PM
*/ */
rule docx_macro rule docx_macro : mail
{ {
strings: strings:
$header="PK" $header="PK"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment