Merge pull request #1868 from blacklanternsecurity/yara-handle-bad-chars

handle bad chars in matched data
blacklanternsecurity · Oct 18, 2024 · e7e5c6a · e7e5c6a
2 parents 0a20c13 + 7595ff7
commit e7e5c6a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/bbot/modules/internal/excavate.py b/bbot/modules/internal/excavate.py
@@ -154,7 +154,9 @@ async def preprocess(self, r, event, discovery_context):
         yara_rule_settings = YaraRuleSettings(description, tags, emit_match)
         yara_results = {}
         for h in r.strings:
-            yara_results[h.identifier.lstrip("$")] = sorted(set([i.matched_data.decode("utf-8") for i in h.instances]))
+            yara_results[h.identifier.lstrip("$")] = sorted(
+                set([i.matched_data.decode("utf-8", errors="ignore") for i in h.instances])
+            )
         await self.process(yara_results, event, yara_rule_settings, discovery_context)
 
     async def process(self, yara_results, event, yara_rule_settings, discovery_context):