Skip to content

R
rules
Unverified Commit d6ff3857 by Marc Rivero López Committed by GitHub
Options

Update RANSOM_locdoor

parent 48593a78
Showing with 1 additions and 2 deletions
malware/RANSOM_locdoor
...@@ -15,8 +15,7 @@ rule locdoor_ransomware { ...@@ -15,8 +15,7 @@ rule locdoor_ransomware {
$s5 = "! Your computer's important files have been encrypted! " fullword ascii $s5 = "! Your computer's important files have been encrypted! " fullword ascii
$s7 = "This program is not supported on your operating system." fullword ascii $s7 = "This program is not supported on your operating system." fullword ascii
$s8 = "echo Your computer's files have been encrypted to Locdoor Ransomware! To make a recovery go to localbitcoins.com and create a wa" ascii $s8 = "echo Your computer's files have been encrypted to Locdoor Ransomware! To make a recovery go to localbitcoins.com and create a wa" ascii
$s9 = "echo Your computer's files have been encrypted to Locdoor Ransomware! To make a recovery go to localbitcoins.com and create a wa" ascii $s9 = "Please enter the password." fullword ascii
$s10 = "Please enter the password." fullword ascii
condition: condition:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment