Update SierraCharlie.yara

43ebf112 · mmorenog · b5c2bd95 · 43ebf112
Commit 43ebf112 authored Feb 25, 2016 by mmorenog
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 9 deletions

SierraCharlie.yara malware/Operation_Blockbuster/SierraCharlie.yara +1 -9

No files found.
--- a/malware/Operation_Blockbuster/SierraCharlie.yara
+++ b/malware/Operation_Blockbuster/SierraCharlie.yara
@@ -18,15 +18,7 @@ rule SierraCharlie
 		FF D1              call    ecx ; DnsFree
 	*/

-	$dnsResolve = {
-			8B 0D 50 A7 56 00 
-			81 F6 8C 3F 7C 5E 
-			6A 01 
-			50 
-			85 C9 
-			74 3A 
-			FF D1 
-		}
+	$dnsResolve = {	8B 0D 50 A7 56 00 81 F6 8C 3F 7C 5E 6A 01 50 85 C9 74 3A FF D1 	}
 		
 	$file1 = "wmplog21t.sqm"
 	$file2 = "wmplog15r.sqm"