Skip to content

R
rules
Commit f9fcca17 by mmorenog
Options

Update GlassRAT.yar

parent 09f57261
Showing with 2 additions and 0 deletions
malware/GlassRAT.yar
...@@ -3,6 +3,8 @@ ...@@ -3,6 +3,8 @@
long as you use it under this license. long as you use it under this license.
*/ */
rule glassrat rule glassrat
meta:
author = "Brian Wallace @botnet_hunter"
{ {
strings: strings:
$a = "PostQuitMessage" $a = "PostQuitMessage"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment