Skip to content

R
rules
Commit ea6263bf by mmorenog Committed by GitHub
Options

Update and rename APT_RAT_indetectables.yar to RAT_Indetectables.yar

parent 3aecc0fc
Showing with 1 additions and 1 deletions
malware/APT_RAT_indetectables.yar → malware/RAT_Indetectables.yar
...@@ -34,7 +34,7 @@ rule Indetectables_RAT: RAT { ...@@ -34,7 +34,7 @@ rule Indetectables_RAT: RAT {
uint16(0) == 0x5a4d and filesize < 5000KB and 1 of them uint16(0) == 0x5a4d and filesize < 5000KB and 1 of them
} }
rule BergSilva_Malware { rule BergSilva_Malware : RAT {
meta: meta:
description = "Detects a malware from the same author as the Indetectables RAT" description = "Detects a malware from the same author as the Indetectables RAT"
author = "Florian Roth" author = "Florian Roth"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment