Malware:ITX8060:2015:LAB3
Mine navigeerimisribale
Mine otsikasti
Create a Yara rule that takes your student code as a parameter
and finds a file from www.tud.ttu.ee/im/Toomas.Lepik/Malware/malware.zip
Arrange the files in the zip file alphabetically,
assign each a number starting from
Take mod 98 from your student code.
Create a YARA rule that would find the file that has the same number as the mod 98 from your student code.
Make similar YARA rules for atleast two malwares from https://courses.cs.ttu.ee/pages/Malware:ITX8060:2015:LAB2
The Yara rule should NOT be based on:
- file name
- hash of the file