malware_analysis

malware_analysis copied to clipboard

Changes that allow it to match on - small PE files with a few of the strings - memory (by removing `filesize` restriction) - reduce the number of strings by...

Neo23x0

`Binary.bz.WrappedSetupProgram` is a cab file

3

`Binary.bz.WrappedSetupProgram` is a cab file not a plaintext test sample : 0e01bad874c61d09d09ce06f76f5e46f6648a1fc943644874c8e1a53a93af9a7

vest12385

Would it make sense to add a little check in https://github.com/telekom-security/malware_analysis/blob/main/plugx/plugx_mustang_panda.yar to not scan java class files? This rule is very often giving false positives on java class files. They...

lars-solberg