Update APT_threatgroup_3390.yar

Bugfix

Update APT_threatgroup_3390.yar
Bugfix
25f5079b · mmorenog · de41c72b · 25f5079b
Commit 25f5079b authored Aug 24, 2015 by mmorenog
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 1 deletions

APT_threatgroup_3390.yar malware/APT_threatgroup_3390.yar +1 -1

No files found.
--- a/malware/APT_threatgroup_3390.yar
+++ b/malware/APT_threatgroup_3390.yar
@@ -188,7 +188,7 @@ rule ThreatGroup3390_Strings {
 		$s4 = "c:\\temp\\ipcan.exe" fullword ascii
 		$s5 = "<%eval(Request.Item(\"admin-na-google123!@#" ascii
 	condition:
-		1 of them and filesize 30KB
+		1 of them and filesize < 30KB
 }

 rule ThreatGroup3390_C2 {