diff --git a/malware/MSAN_Locker.yar b/malware/MSAN_Locker.yar index 79a12f90..1b72029a 100644 --- a/malware/MSAN_Locker.yar +++ b/malware/MSAN_Locker.yar @@ -3,9 +3,9 @@ rule MSAN_locker meta: author = "Deathrobotpunch1" description = "MSAN Locker YARA rule" - sha256_1 = cd87a63ad8a77a82f135401033e862de308286458273615a17c3013da65ad79a - sha256_2 = 33cadf8ff779d9d48135c5d9ea7b9b79ad59411c246df3f4421cc895548d07c4 - sha256_3 = 78e72c3f93e794d0eb8a7685e536cc2d1045cfb5c3d9cb40de1c07e076ffb6a3 + hash1 = cd87a63ad8a77a82f135401033e862de308286458273615a17c3013da65ad79a + hash2 = 33cadf8ff779d9d48135c5d9ea7b9b79ad59411c246df3f4421cc895548d07c4 + hash3 = 78e72c3f93e794d0eb8a7685e536cc2d1045cfb5c3d9cb40de1c07e076ffb6a3 strings: $hex_strings1 = {48 56 57 41 54 41 55 41 56 41 57 49}