Common Information
| Type | Value |
|---|---|
| Value |
rule Gazer_logfile_name {
strings:
$s1 = "CVRG72B5.tmp.cvr"
$s2 = "CVRG1A6B.tmp.cvr"
$s3 = "CVRG38D9.tmp.cvr"
condition:
(uint16(0) == 0x5a4d) and 1 of them
}
|
| Category | |
| Type | Yara Rule |
| Misp Type | |
| Description |