You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Yara rules DSHELL/production/yara/APT_Backdoor_Win_DShell_1.yar and APT_Backdoor_Win_DShell_2.yar trigger too many matches exception in yara-python
#22
Open
jwoytek opened this issue
Mar 17, 2021
· 0 comments
Using yara-python to match against these rules, the following rules trigger a too many matches exception ("internal error: 30") when run against certain files:
At least one example hash that will trigger the exception against these rules is:
sha256: 04a88437468e6e9c447805d733ec82e08fd4256af44542797f16a7e318f763f8
md5: 86031c9fc72b42fef6a4c7f8b72cda83
sha1: 6a4c3370eaa373aca1113f0067d40076615b4d66
The text was updated successfully, but these errors were encountered:
Using yara-python to match against these rules, the following rules trigger a too many matches exception ("internal error: 30") when run against certain files:
rules/DSHELL/production/yara/APT_Backdoor_Win_DShell_1.yar
rules/DSHELL/production/yara/APT_Backdoor_Win_DShell_3.yar
At least one example hash that will trigger the exception against these rules is:
sha256: 04a88437468e6e9c447805d733ec82e08fd4256af44542797f16a7e318f763f8
md5: 86031c9fc72b42fef6a4c7f8b72cda83
sha1: 6a4c3370eaa373aca1113f0067d40076615b4d66
The text was updated successfully, but these errors were encountered: