Create GlassRAT.yar

malware/GlassRAT.yar

+/*
+    This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as
+    long as you use it under this license.
+*/
+rule glassrat
+{
+	strings:
+    	$a = "PostQuitMessage"
+        $b = "pwlfnn10,gzg"
+        $c = "update.dll"
+        $d = "_winver"
+    condition:
+    	all of them
+
+}