valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 18:15:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

FreeMilk YARA rules bugfix - thx to M. Selck

Browse Source
This commit is contained in:
Florian Roth 2017-10-06 23:54:13 +02:00
parent 97c97a803c
commit 5c889db4a9
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
yara/apt_freemilk.yar
View File

@ -6,6 +6,8 @@
Reference: https://researchcenter.paloaltonetworks.com/2017/10/unit42-freemilk-highly-targeted-spear-phishing-campaign/ Reference: https://researchcenter.paloaltonetworks.com/2017/10/unit42-freemilk-highly-targeted-spear-phishing-campaign/
*/ */
import "pe"
/* Rule Set ----------------------------------------------------------------- */ /* Rule Set ----------------------------------------------------------------- */
rule FreeMilk_APT_Mal_1 { rule FreeMilk_APT_Mal_1 {