Skip to content

R
rules
Unverified Commit fc624daf by unixfreaxjp Committed by GitHub
Options

Update MALW_Mirai_Okiru_ELF.yar

parent a35f509f
master
No related merge requests found
Showing with 1 additions and 1 deletions
malware/MALW_Mirai_Okiru_ELF.yar
...@@ -48,7 +48,7 @@ rule Mirai_Okiru { ...@@ -48,7 +48,7 @@ rule Mirai_Okiru {
// $st07 = "iptables -F\n" fullword nocase wide ascii // $st07 = "iptables -F\n" fullword nocase wide ascii
condition: condition:
all of them all of them
and is__elf and is__elf
and is__Mirai_gen7 and is__Mirai_gen7
and filesize < 100KB and filesize < 100KB
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment