valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 10:05:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixed some dates

Browse Source
This commit is contained in:
Florian Roth 2018-12-14 08:55:27 +01:00
parent 37582f20d3
commit e4dd8c610c
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
yara/apt_uscert_ta17-1117a.yar
View File

@ -62,7 +62,7 @@ rule PLUGX_RedLeaves {
date = "03042017"
reference = "https://www.us-cert.gov/ncas/alerts/TA17-117A"
incident = "10118538"
date = "2017/04/03"
date = "2017-04-03"
MD5_1 = "598FF82EA4FB52717ACAFB227C83D474"
MD5_2 = "7D10708A518B26CC8C3CBFBAA224E032"
MD5_3 = "AF406D35C77B1E0DF17F839E36BCE630"

2
yara/generic_anomalies.yar
View File

@ -41,7 +41,7 @@ rule Cloaked_as_JPG {
meta:
description = "Detects a cloaked file as JPG"
author = "Florian Roth (eval section from Didier Stevens)"
date = "2015/02/29"
date = "2015-02-28"
score = 40
strings:
$fp1 = "<!DOCTYPE" ascii