JPCERTCC / MalConfScan

Volatility plugin for extracts configuration data of known malware
Other
485 stars 67 forks source link

Only one extracted IP address is displayed because the key in the array is not updated #3

Closed soji256 closed 5 years ago

soji256 commented 5 years ago

The array index "i" is not incremented.

https://github.com/JPCERTCC/MalConfScan/blob/24516e53a2fcafdcfd9a2c40cd1776dcae628336/utils/emotetscan.py#L117

Therefore, only one IP address is displayed.

shu-tom commented 5 years ago

Thanks for adding issue. I fixed it.

soji256 commented 5 years ago

It worked. Thanks for the quick fix!