Yara | Malware Research | Theory 2

Поділитися
Вставка
  • Опубліковано 3 січ 2025

КОМЕНТАРІ •

  • @CybSecBuddy
    @CybSecBuddy Рік тому

    Hey, I got that how the string match will work and that hex digit one. but I am unable to get that regular expression written in $c [5:11]. Could please explain me. How this experience will try to match with the malware's string or hex expression.

    • @RahulSinghInfosec
      @RahulSinghInfosec  Рік тому

      If you are referring to the expression with [a-fA-F0-9], which has been assigned to $c -> This is a regular expression. This will match with any expression which has characters a to f, A to F and 0-9.

    • @CybSecBuddy
      @CybSecBuddy Рік тому

      ​@@RahulSinghInfosecyeah, that's what I want to ask thank you for explaining, and my mistake that timestamp was wrong!