Common Information
| Type | Value |
|---|---|
| Value |
rule SLAPSTICK {
meta:
author = "Mandiant "
strings:
$ss1 = "%Y %b %d %H:%M:%S \x00"
$ss2 = "%-23s %-23s %-23s\x00"
$ss3 = "%-23s %-23s %-23s %-23s %-23s %s\x0a\x00"
condition:
(uint32(0) == 0x464c457f) and all of them
}
|
| Category | |
| Type | Yara Rule |
| Misp Type | |
| Description |