c0m4r / paranoya

Simple IOC and YARA scanner for Linux®
GNU General Public License v3.0
7 stars 0 forks source link

yara compile errors in lauching scripts #10

Closed polosec closed 6 months ago

polosec commented 6 months ago

Describe the bug errors in compiling yara rules when run the main script. To Reproduce command:./paranoya.py -d -s 20000 --noindicator --csv --intense --logfolder log --silent --nolisten


File "/Users/1/Downloads/paranoya-4.0.0/./paranoya.py", line 1277, in initialize_yara_rules
    compiled_rules = yara.compile(
yara.SyntaxError: line 21: invalid field name "number_of_signatures"
yara.SyntaxError: line 112: invalid field name "imphash"

Screenshots

image

Your environment (please complete the following information):

c0m4r commented 6 months ago

Hi, first of all - paranoya doesn't support mac and I do not plan such support. Therefore, I cannot reproduce the error. However a quick google search suggested that these errors might occur on MacOS due to some openssl-related issues:

I hope you can sort it out with these read. You can also try the docker version of paranoya.