Update email_Ukraine_BE_powerattack.yar

Yara-Rules · Mar 29, 2016 · 5a11fef · 5a11fef
1 parent ba695c6
commit 5a11fef
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/email/email_Ukraine_BE_powerattack.yar b/email/email_Ukraine_BE_powerattack.yar
@@ -3,7 +3,7 @@
     long as you use it under this license.
 */
 
-rule email_Ukraine_power_attack_content {
+rule email_Ukraine_power_attack_content : mail {
 	meta:
 		author = "@mmorenog,@yararules"
 		description = "Detects a possible .eml used in the Ukraine BE power attack"
@@ -19,7 +19,7 @@ rule email_Ukraine_power_attack_content {
 	condition:
 		3 of them
 }
-rule email_Ukraine_power_attack_attachment {
+rule email_Ukraine_power_attack_attachment : mail {
 	meta:
 		author = " @yararules"
 		description = "Detects a possible .eml used in the Ukraine BE power attack"