rule Trojan_Malware_Win32_NSAnti_C
{
meta:
judge = "black"
threatname = "Trojan[Malware]/Win32.NSAnti.C"
threattype = "Malware"
family = "NSAnti"
hacker = "None"
refer = "5c64e6879a9746a0d65226706e0edc7a"
comment = "None"
description = "Chinese Hacktool Set - file svu.exe"
author = "Florian Roth -lz"
date = "2015-06-13"

strings:
$s0 = "MZKERNEL32.DLL" fullword ascii
$s1 = "UpackByDwing@" fullword ascii
$s2 = "GetProcAddress" fullword ascii
$s3 = "WriteFile" fullword ascii
condition:
$s0 at 0 and filesize < 50KB and all of them
}

@madsugar 谢谢 除了 github 还有其他的网站吗

急急急

@xxx777 怎么发送到不同人的邮箱呢 这个 flask-mail 可以满足吗？