Mirrors/reversinglabs-reversinglabs-yara-rules
1
0
Fork 0
mirror of https://github.com/reversinglabs/reversinglabs-yara-rules synced 2026-06-08 17:57:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'develop' of github.com:reversinglabs/reversinglabs-yara-rules into develop

Browse Source 
merge upstream: mboot
This commit is contained in:
Threat Analyst
2023-06-07 15:58:51 +02:00
parent 5fddfbf9d8 a8973f1cbd
commit d4a62b8538
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
yara/virus/Linux.Virus.Vit.yara
+2 -4
View File
@@ -1,5 +1,3 @@
import "elf"
rule Linux_Virus_Vit : tc_detection malicious
{
meta:
@@ -32,5 +30,5 @@ rule Linux_Virus_Vit : tc_detection malicious
$vit_str = "vi324.tmp"
condition:
uint32(0) == 0x464C457F and $vit_entry_point at elf.entry_point and $vit_str
}
uint32(0) == 0x464C457F and all of them
}