Skip to content

Commit

Permalink
Update MalScript_Tricks.yar
Browse files Browse the repository at this point in the history
  • Loading branch information
bartblaze authored Jan 8, 2024
1 parent f774bfe commit 76102f2
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions rules/generic/MalScript_Tricks.yar
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ rule MalScript_Tricks
source = "BARTBLAZE"
author = "@bartblaze"
description = "Identifies tricks often seen in malicious scripts such as moving the window off-screen or resizing it to zero."
category = "MALWARE"
category = "INFO"

strings:
$s1 = "window.moveTo -" ascii wide nocase
Expand All @@ -22,4 +22,4 @@ rule MalScript_Tricks
condition:
( all of ($s*) or all of ($x*)) and filesize <50KB
}
}

0 comments on commit 76102f2

Please sign in to comment.