Merge pull request #474 from CybercentreCanada/CAPE9999

Update signatures.py
CybercentreCanada · Oct 18, 2024 · 6e6ea7d · 6e6ea7d
2 parents abf3356 + ffbce6c
commit 6e6ea7d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cape/signatures.py b/cape/signatures.py
@@ -507,6 +507,7 @@
     "packer_armadillo_regkey": "Packer",
     "packer_entropy": "Packer",
     "packer_nspack": "Packer",
+    "packer_themida": "Packer",
     "packer_unknown_pe_section_name": "Packer",
     "packer_upx": "Packer",
     "packer_yoda": "Packer",
@@ -661,6 +662,7 @@
     "suricata_alert": "Network",
     "suspicious_certutil_use": "Command",
     "suspicious_command_tools": "Command",
+    "suspicious_html_name": "Phishing",
     "suspicious_html_title": "Phishing",
     "suspicious_ioctl_scsipassthough": "Bootkit",
     "suspicious_js_script": "Downloader",