From 186011b934af263b0b236b7964bfb3cdfb225f51 Mon Sep 17 00:00:00 2001 From: StrangerealIntel <54320855+StrangerealIntel@users.noreply.github.com> Date: Thu, 23 Jul 2020 11:04:38 +0200 Subject: [PATCH] Update Yara_Patchwork_July_2020_1.yar --- .../Patchwork/2020-07-23/Yara/Yara_Patchwork_July_2020_1.yar | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Indian/APT/Patchwork/2020-07-23/Yara/Yara_Patchwork_July_2020_1.yar b/Indian/APT/Patchwork/2020-07-23/Yara/Yara_Patchwork_July_2020_1.yar index a47ced1..b0de7ed 100644 --- a/Indian/APT/Patchwork/2020-07-23/Yara/Yara_Patchwork_July_2020_1.yar +++ b/Indian/APT/Patchwork/2020-07-23/Yara/Yara_Patchwork_July_2020_1.yar @@ -65,7 +65,7 @@ rule Mal_BozokRAT_July2020_2 { author = "Arkbird_SOLG" reference = "https://github.com/StrangerealIntel/CyberThreatIntel/tree/master/Indian/APT/Patchwork/2020-07-23/Analysis.md" date = "2020-07-15" - hash1 = " cc8867a5fd62b82e817afc405807f88716960af5744040999b619b126a9ecf57" + hash1 = "cc8867a5fd62b82e817afc405807f88716960af5744040999b619b126a9ecf57" strings: $s1 = "ouemm/emm!!!!!!!!!!!!!" fullword ascii $s2 = "Vtfs43/emm" fullword ascii