Delete viotto_keylogger.yar

2024-07-25 13:22:00 -05:00 · 2024-07-25 13:22:00 -05:00 · ef9edf2e0e
commit ef9edf2e0e
parent 753a50d51e
1 changed files with 0 additions and 18 deletions
--- a/me/viotto_keylogger.yar
+++ b/me/viotto_keylogger.yar
@ -1,18 +0,0 @@
-rule viotto_keylogger
-{
-meta:
-	author = "Paul B. (@hexlax) PhishMe Research"
-	description = "Matches unpacked Viotto Keylogger samples"
-	details "http://phishme.com/viotto-keylogger"
-
-strings:
-	$hdr = "MZ"
-	$s1 = "Viotto Keylogger"
-	$s2 = "msvbvm60"
-	$s3 = "FtpPutFileA"
-	$s4 = "VBA6"
-	$s5 = "SetWindowsHookExA"
-condition:
-	($hdr at 0) and all of ($s*)
-
-}