nuclei-templates/file/malware/alpha-malware.yaml

16 lines
362 B
YAML

id: alpha-malware
info:
name: Alpha Malware - Detect
author: daffainfo
severity: info
reference: https://github.com/Yara-Rules/rules/blob/master/malware/RANSOM_Alpha.yar
tags: malware,file
file:
- extensions:
- all
matchers:
- type: binary
binary:
- "520065006100640020004D0065002000280048006F00770020004400650063"