Update and rename KeyBoy.yar to APT_KeyBoy.yar

c735a0d9 · mmorenog · GitHub · c2183a58 · c735a0d9
Commit c735a0d9 authored Jul 20, 2016 by mmorenog Committed by GitHub Jul 20, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

APT_KeyBoy.yar malware/APT_KeyBoy.yar +2 -2

No files found.
--- a/malware/KeyBoy.yar
+++ b/malware/KeyBoy.yar
@@ -5,7 +5,7 @@

 import "pe"

-rule KeyBoy_Dropper  
+rule KeyBoy_Dropper  : dropper
 {  
    meta:
        Author      = "Rapid7 Labs"
@@ -25,7 +25,7 @@ rule KeyBoy_Dropper
        all of them  
 }

-rule KeyBoy_Backdoor  
+rule KeyBoy_Backdoor  : Backdoor APT
 {
    meta:
        Author      = "Rapid7 Labs"