diff --git a/nazar/apt_ZZ_Naikon_codebase.yar b/nazar/apt_ZZ_Naikon_codebase.yar deleted file mode 100644 index 5a39c6e..0000000 --- a/nazar/apt_ZZ_Naikon_codebase.yar +++ /dev/null @@ -1,19 +0,0 @@ -rule apt_ZZ_Naikon_codebase : Naikon -{ - meta: - report = "Naikon New AR Backdoor Deployment to Southeast Asia" - description = "Naikon typo" - author = "Kaspersky" - copyright = "Kaspersky" - version = "1.0" - date = "2018-06-28" - last_modified = "2018-06-28" - - strings: - $a1 = "Create Directroy [%s] Failed:%d" wide - - condition: - uint16(0) == 0x5A4D and - filesize < 450000 and - $a1 -}