Commit f6ea141a by mmorenog Committed by GitHub

Create MALW_TrickBot.yar

parent cc091cee
......@@ -31,7 +31,7 @@ $str_systeminf_04 =
$str_systeminf_05 = "</autostart>"
$str_systeminf_06 = "</moduleconfig>"
condition:
all of ($str_ systeminf_*)
all of ($str_systeminf_*)
}
rule MALW_dllinject_trickbot_module : Trojan
{
......@@ -44,7 +44,7 @@ $str_dllinj_02 = "<ignore_mask>"
$str_dllinj_03 = "<require_header>"
$str_dllinj_04 = "</dinj>"
condition:
all of ($str_ dllinj_*)
all of ($str_dllinj_*)
}
rule MALW_mailsercher_trickbot_module :
Trojan
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment