diff --git a/infostealer/Win32.Infostealer.Discord.yara b/infostealer/Win32.Infostealer.Discord.yara index 69db533..1c1df87 100644 --- a/infostealer/Win32.Infostealer.Discord.yara +++ b/infostealer/Win32.Infostealer.Discord.yara @@ -9,7 +9,7 @@ rule Win32_Infostealer_Discord //yarahub_rule_matching_tlp = "TLP:WHITE" //yarahub_rule_sharing_tlp = "TLP:WHITE" //yarahub_reference_md5 = "" - +htehtwehwre strings: $path = "discord\\Local Storage\\leveldb" nocase