YARA External Variables - FromRaccine > ParentFromRaccine

Neo23x0 / Raccine

A Simple Ransomware Vaccine

The Unlicense

942 stars 123 forks source link

YARA External Variables - FromRaccine > ParentFromRaccine #74

Open Neo23x0 opened 3 years ago

Neo23x0 commented 3 years ago

The second value shouldn't be there, right? @JohnLaTwC

JohnLaTwC commented 3 years ago

Correct, it's there because the defines for the child and the parent are combined together and each emits this define so they get concatenated together.

JohnLaTwC commented 3 years ago

I removed these defines all together so we should be able to close this issue.