Fix rule syntax for APT34_VALUEVAULT rule

deadbits / yara-rules

Collection of YARA signatures from individual research

The Unlicense

42 stars 9 forks source link

Fix rule syntax for APT34_VALUEVAULT rule #5

Closed themullinator closed 4 years ago

themullinator commented 4 years ago

yara-python was throwing a few syntax errors - added $ to each of the strings and changed $gopath from plural to singular in the condition. Rule compiles successfully now with both the yara 3.4.0 binary and yara-python 3.8.0

deadbits commented 4 years ago

Thank you for this! Slipped past me between testing locally and the commit :D