Malshare / MalShare

http://www.malshare.com
22 stars 4 forks source link

Search is only returning old results #79

Open Squiblydoo opened 6 months ago

Squiblydoo commented 6 months ago

Using the web UI, I found that when I search by a YARA rule, or pivot from the homescreen on a YARA rule, I only return results that are 2022 and older.

To reproduce, click a YARA result from a recent upload. This results in a search such as "https://malshare.com/search.php?query=YRP/Big_Numbers3". The results will likely look similar to the following, namely that results from March 20, 2022 and older are returned.

image

Note: In my testing, I only looked at files matching the YRP query because I don't know the syntax for the other YARA rule sets. (IMO this is a documentation short-coming which I may need to mention in another report or suggest some documentation to resolve.)

EDIT: I found how to search by other YARA rules, but that functionality seems broken and reported in another issue: https://github.com/Malshare/MalShare/issues/69