Skip to content

R
rules
Commit e72f6165 by Marc Rivero López Committed by GitHub
Options

Update APT_Hikit.yar 

Syntax rule fixed
parent 1b1c9665
Showing with 4 additions and 0 deletions
malware/APT_Hikit.yar
...@@ -7,10 +7,14 @@ import "pe" ...@@ -7,10 +7,14 @@ import "pe"
rule APT_Hikit_msrv rule APT_Hikit_msrv
{ {
meta: meta:
author = "ThreatConnect Intelligence Research Team" author = "ThreatConnect Intelligence Research Team"
strings: strings:
$m = {6D 73 72 76 2E 64 6C 6C 00 44 6C 6C} $m = {6D 73 72 76 2E 64 6C 6C 00 44 6C 6C}
condition: condition:
any of them any of them
} }
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment