Update and rename xDedic_marketplace.yar to MALW_xDedic_marketplace.yar

bfcc0d3b · mmorenog · GitHub · f4090b75 · bfcc0d3b
Commit bfcc0d3b authored Jul 21, 2016 by mmorenog Committed by GitHub Jul 21, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

MALW_xDedic_marketplace.yar malware/MALW_xDedic_marketplace.yar +2 -2

No files found.
--- a/malware/xDedic_marketplace.yar
+++ b/malware/xDedic_marketplace.yar
-rule xDedic_SysScan_unpacked {
+rule xDedic_SysScan_unpacked : crimeware {
 meta:
 author = " Kaspersky Lab"
 ref = "https://securelist.com/files/2016/06/xDedic_marketplace_ENG.pdf"
@@ -24,7 +24,7 @@ condition:
 ((any of ($a*)) or (all of ($b*)))
 }
 import "pe"
-rule xdedic_packed_syscan {
+rule xdedic_packed_syscan : crimeware {
 meta:
 author = "Kaspersky Lab"
 company = "Kaspersky Lab"