Common Information
| Type | Value |
|---|---|
| Value |
rule Zupdax {
meta:
author = "Snorre Fagerland, Norton Labs"
strings:
$ = "\\AdobeBak\\Proc.dat" ascii wide
$ = "software\\XXZH" ascii wide
$ = "%s\\updata\\connect" ascii wide
condition:
any of them
}
|
| Category | |
| Type | Yara Rule |
| Misp Type | |
| Description |