Skip to content

Commit

Permalink
Blacklist one YARA rule
Browse files Browse the repository at this point in the history 
LibClamAV Error: parse_yara_hex_string: Single byte subpatterns unsupported in ClamAV
LibClamAV Error: load_oneyara: error in parsing yara hex string
LibClamAV Warning: load_oneyara: clamav cannot support 1 input strings, skipping YARA.Windows_Trojan_BloodAlchemy_de591c5a
LibClamAV Warning: cli_loadyara: problem parsing yara file /var/lib/clamav/Windows_Trojan_BloodAlchemy.yar, yara rule Windows_Trojan_BloodAlchemy_de591c5a
LibClamAV Error: Can't load /var/lib/clamav/Windows_Trojan_BloodAlchemy.yar: Malformed database
LibClamAV Error: cli_loaddbdir: error loading database /var/lib/clamav/Windows_Trojan_BloodAlchemy.yar
  • Loading branch information
@pyllyukko
pyllyukko committed Nov 21, 2023
1 parent 5f0e80a commit 4c54b8a
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions tasks/clamav.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -215,6 +215,7 @@
malware_lodeinfo_network_decode_process_xor_bruteforce
CS_encrypted_beacon_x86
malware_shellcode_hash
Windows_Trojan_BloodAlchemy_de591c5a
tags:
- configuration
- yara
Expand Down

1 comment on commit 4c54b8a

@pyllyukko
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#84

Please sign in to comment.