Update TangoBravo.yara

malware/Operation_Blockbuster/TangoBravo.yara

@@ -23,20 +23,7 @@ rule TangoBravo
 		75 E2              jnz     short loc_40110C
 	*/
 
-	$targetDomainCheck = {
-			5? 
-			5? 
-			FF ?? 
-			83 C4 08 
-			85 C0 
-			75 ?? 
-			8? ?? 08 01 00 00 
-			8? ?? 08 01 00 00 
-			4? 
-			8B ?? 
-			84 ?? 
-			75  
-		}
+	$targetDomainCheck = {5? 5? FF ?? 83 C4 08 85 C0 75 ?? 8? ?? 08 01 00 00 8? ?? 08 01 00 00 4? 8B ?? 84 ?? 75  }
 
 	condition:
 		$targetDomainCheck in ((pe.sections[pe.section_index(".text")].raw_data_offset)..(pe.sections[pe.section_index(".text")].raw_data_offset + pe.sections[pe.section_index(".text")].raw_data_size))