Commit 7a2db79d by Marc Rivero López Committed by GitHub

Update APT_LotusBlossom.yar

parent db73ef22
rule EliseLotusBlossom rule EliseLotusBlossom
{ {
meta: meta:
author = "Jose Ramon Palanco" author = "Jose Ramon Palanco"
date = "2015-06-23" date = "2015-06-23"
...@@ -16,6 +17,7 @@ strings: ...@@ -16,6 +17,7 @@ strings:
$s6 = "0SSSSS" $s6 = "0SSSSS"
$s7 = "441202100205" $s7 = "441202100205"
$s8 = "0WWWWW" $s8 = "0WWWWW"
condition: condition:
$magic at 0 and all of ($s*) $magic at 0 and all of ($s*)
} }
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment