diff --git a/Exploit-Kits/Angler_EK.yar b/Exploit-Kits/EK_Angleryar similarity index 97% rename from Exploit-Kits/Angler_EK.yar rename to Exploit-Kits/EK_Angleryar index d6bf15e1..d7495cb2 100644 --- a/Exploit-Kits/Angler_EK.yar +++ b/Exploit-Kits/EK_Angleryar @@ -2,7 +2,7 @@ This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license. */ -rule AnglerEKredirector +rule AnglerEKredirector : EK { meta: description = "Angler Exploit Kit Redirector" @@ -20,7 +20,7 @@ rule AnglerEKredirector condition: all of them } -rule angler_flash +rule angler_flash : EK { meta: author = "Josh Berry" @@ -48,7 +48,7 @@ strings: condition: 14 of them } -rule angler_flash2 +rule angler_flash2 : EK { meta: author = "Josh Berry" @@ -76,7 +76,7 @@ strings: condition: 14 of them } -rule angler_flash4 +rule angler_flash4 : EK { meta: author = "Josh Berry" @@ -106,7 +106,7 @@ strings: condition: 16 of them } -rule angler_flash5 +rule angler_flash5 : EK { meta: author = "Josh Berry" @@ -132,7 +132,7 @@ strings: condition: 12 of them } -rule angler_flash_uncompressed +rule angler_flash_uncompressed : EK { meta: author = "Josh Berry" @@ -163,7 +163,7 @@ strings: condition: 17 of them } -rule angler_html +rule angler_html : EK { meta: author = "Josh Berry" @@ -195,7 +195,7 @@ strings: condition: 18 of them } -rule angler_html2 +rule angler_html2 : EK { meta: author = "Josh Berry" @@ -227,7 +227,7 @@ strings: condition: 18 of them } -rule angler_jar +rule angler_jar : EK { meta: author = "Josh Berry" @@ -250,7 +250,7 @@ strings: condition: 9 of them } -rule angler_js +rule angler_js : EK { meta: author = "Josh Berry"