Update APT_HackingTeam.yar

malware/APT_HackingTeam.yar

@@ -8,7 +8,6 @@ rule bin_ndisk {
 		author = "Florian Roth"
 		reference = "https://www.virustotal.com/en/file/a03a6ed90b89945a992a8c69f716ec3c743fa1d958426f4c50378cca5bef0a01/analysis/1436184181/"
 		date = "2015-07-07"
-		score = 100
 		hash = "cf5089752ba51ae827971272a5b761a4ab0acd84"
 	strings:
 		$s1 = "\\Registry\\Machine\\System\\ControlSet00%d\\services\\ndisk.sys" fullword wide 
@@ -29,7 +28,6 @@ rule Hackingteam_Elevator_DLL {
 		author = "Florian Roth"
 		reference = "http://t.co/EG0qtVcKLh"
 		date = "2015-07-07"
-		score = 70
 		hash = "b7ec5d36ca702cc9690ac7279fd4fea28d8bd060"
 	strings:
 		$s1 = "\\sysnative\\CI.dll" fullword ascii 
@@ -52,7 +50,6 @@ rule HackingTeam_Elevator_EXE {
 		author = "Florian Roth"
 		reference = "Hacking Team Disclosure elevator.c"
 		date = "2015-07-07"
-		score = 70
 		hash1 = "40a10420b9d49f87527bc0396b19ec29e55e9109e80b52456891243791671c1c"
 		hash2 = "92aec56a859679917dffa44bd4ffeb5a8b2ee2894c689abbbcbe07842ec56b8d"
 		hash = "9261693b67b6e379ad0e57598602712b8508998c0cb012ca23139212ae0009a1"
@@ -73,6 +70,3 @@ rule HackingTeam_Elevator_EXE {
 	condition:
 		uint16(0) == 0x5a4d and filesize < 3000KB and all of ($x*) and 3 of ($s*)
 }
-
-
-