search

Yara-Rules / rules

Repository of yara rules
GNU General Public License v2.0
4.2k stars 1.01k forks source link

Duplicities - BeEF_browser_hooked, src_ptheft_command #147

Closed xambroz closed 8 years ago

xambroz commented 8 years ago

Hello, rules BeEF_browser_hooked and src_ptheft_command are present in duplicate instances in: Yara-Rules/malware/EXPERIMENTAL_Beef.yar:rule BeEF_browser_hooked : experimental { Yara-Rules/Packers/Javascript_exploit_and_obfuscation.yar:rule BeEF_browser_hooked {

Yara-Rules/malware/EXPERIMENTAL_Beef.yar:rule src_ptheft_command : experimental { Yara-Rules/Packers/Javascript_exploit_and_obfuscation.yar:rule src_ptheft_command {

One of those instances should be probably removed or renamed to make it possible to con-cat the different/all yara files and use the resulting ruleset.

Best regards Michal Ambroz

jholgui commented 8 years ago

Delete duplicies.

Thank you @xambroz