Skip to content

R
rules
Commit d913ad44 by mmorenog
Options

Update Adwind_JAR_PACKA.yar

parent 09a1b1dd
Showing with 1 additions and 1 deletions
malware/Adwind_JAR_PACKA.yar
...@@ -6,7 +6,7 @@ rule Adwind_JAR_PACKA { ...@@ -6,7 +6,7 @@ rule Adwind_JAR_PACKA {
meta: meta:
author = "Vitaly Kamluk, Vitaly.Kamluk@kaspersky.com" author = "Vitaly Kamluk, Vitaly.Kamluk@kaspersky.com"
reference = "https://securelist.com/securelist/files/2016/02/KL_AdwindPublicReport_2016.pdf" reference = "https://securelist.com/securelist/files/2016/02/KL_AdwindPublicReport_2016.pdf"
last_modi ed = "2015-11-30" last_modified = "2015-11-30"
strings: strings:
$b1 = ".class" ascii $b1 = ".class" ascii
$b2 = "c/a/a/" ascii $b2 = "c/a/a/" ascii
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment