fix: duplicate filename IOC

Neo23x0 · Nov 1, 2024 · 1f9bbe2 · 1f9bbe2
1 parent 2a74799
commit 1f9bbe2
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/iocs/filename-iocs.txt b/iocs/filename-iocs.txt
@@ -359,7 +359,6 @@ Temp\\dllhost\.exe;80
 Temp\\sechost\.exe;80
 AppData\\chkdbg.log;60
 AppData\\svchost\.exe;80
-temp\\svchost\.exe;80
 AppData\\conhost\.dll;80
 Temp\\conhost\.dll;80
 

diff --git a/yara/apt_nobellium_rdp_phish.yar b/yara/apt_nobellium_rdp_phish.yar
@@ -21,3 +21,4 @@ rule SUSP_RDP_File_Indicators_Oct24_1 {
       filesize < 50KB
       and all of them
 }
+
Original file line number	Diff line number	Diff line change
Expand Up		@@ -21,3 +21,4 @@ rule SUSP_RDP_File_Indicators_Oct24_1 {
		filesize < 50KB
		and all of them
		}