From 827246f6a38f2a32764486d358b6a0ed78887e41 Mon Sep 17 00:00:00 2001 From: blackorbird <137812951@qq.com> Date: Mon, 11 May 2020 22:34:31 +0800 Subject: [PATCH] Delete apt_ZZ_Naikon_codebase.yar --- nazar/apt_ZZ_Naikon_codebase.yar | 19 ------------------- 1 file changed, 19 deletions(-) delete mode 100644 nazar/apt_ZZ_Naikon_codebase.yar diff --git a/nazar/apt_ZZ_Naikon_codebase.yar b/nazar/apt_ZZ_Naikon_codebase.yar deleted file mode 100644 index 5a39c6e..0000000 --- a/nazar/apt_ZZ_Naikon_codebase.yar +++ /dev/null @@ -1,19 +0,0 @@ -rule apt_ZZ_Naikon_codebase : Naikon -{ - meta: - report = "Naikon New AR Backdoor Deployment to Southeast Asia" - description = "Naikon typo" - author = "Kaspersky" - copyright = "Kaspersky" - version = "1.0" - date = "2018-06-28" - last_modified = "2018-06-28" - - strings: - $a1 = "Create Directroy [%s] Failed:%d" wide - - condition: - uint16(0) == 0x5A4D and - filesize < 450000 and - $a1 -}