yara takes a single rule file. You need to either concatenate all your rule files into a single file and use that or you can use yarac to compile them all into a single binary yara rule file and use that. It would be something like:
yara.c *.yar my_rules yara -rg my_rules infected folder -- WXS > On Jun 27, 2017, at 2:06 AM, Samsung NFC <[email protected]> wrote: > > Hi, > I like to apply some yara-rules on a folder which contains some > malware-samples (e.g. infected1.exe, infected2.zip, infetced3.doc, etc.). The > yara-rules are in a folder and every yara rule is a file ( e.g. exploit.yar, > ransome.yar ,etc.). > > If I apply my yara-rules on the malware-sample folder like that: > > yara -rg rules/* infectedfolder > > It doesn't work that way. > > Does I have to paste my rules in a single file and then apply "yara -rg > rule.yar infectedfolder" to do a masscan or is there another way to do a > masscsan? > > Thanks Thomas > > -- > You received this message because you are subscribed to the Google Groups > "YARA" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "YARA" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
