Skip to content

R
rules
Commit bfcc0d3b by mmorenog Committed by GitHub
Options

Update and rename xDedic_marketplace.yar to MALW_xDedic_marketplace.yar

parent f4090b75
Showing with 2 additions and 2 deletions
malware/xDedic_marketplace.yar → malware/MALW_xDedic_marketplace.yar
rule xDedic_SysScan_unpacked { rule xDedic_SysScan_unpacked : crimeware {
meta: meta:
author = " Kaspersky Lab" author = " Kaspersky Lab"
ref = "https://securelist.com/files/2016/06/xDedic_marketplace_ENG.pdf" ref = "https://securelist.com/files/2016/06/xDedic_marketplace_ENG.pdf"
...@@ -24,7 +24,7 @@ condition: ...@@ -24,7 +24,7 @@ condition:
((any of ($a*)) or (all of ($b*))) ((any of ($a*)) or (all of ($b*)))
} }
import "pe" import "pe"
rule xdedic_packed_syscan { rule xdedic_packed_syscan : crimeware {
meta: meta:
author = "Kaspersky Lab" author = "Kaspersky Lab"
company = "Kaspersky Lab" company = "Kaspersky Lab"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment