mandiant/capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules.git synced 2026-10-11 21:39:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix dynamic unsupported (#1169)

Browse Source
This commit is contained in:
Stefano De Rosa
2026-07-24 12:12:05 -06:00
committed by GitHub
parent d672a8d3bf
commit 8a79036718
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
malware-family/plugx/match-known-plugx-module.yml
+1 -1
View File
@@ -8,7 +8,7 @@ rule:
description: the sample references known PlugX watermarks (hexified YYYYMMDD + command opcode)
scopes:
static: function
dynamic: span of calls
dynamic: unsupported # requires mnemonic
references:
- https://circl.lu/assets/files/tr-12/tr-12-circl-plugx-analysis-v1.pdf
- https://www.fireeye.com/blog/threat-research/2014/07/pacific-ring-of-fire-plugx-kaba.html