Update UniformAlfa.yara

malware/Operation_Blockbuster/UniformAlfa.yara

@@ -20,17 +20,7 @@ rule UniformAlfa
 		FF 15 08 70 40 00  call    ds:DeleteService
 	*/
 
-	$stopDeleteService = {
-			8D [3] 
-			5? 
-			6A 01 
-			5? 
-			FF D? 
-			83 [3] 01 
-			75 ?? 
-			5? 
-			FF 15  
-		}
+	$stopDeleteService = {8D [3] 5? 6A 01 5? FF D?	83 [3] 01 75 ?? 5? FF 15}
 
 	condition:
 		$stopDeleteService in ((pe.sections[pe.section_index(".text")].raw_data_offset)..(pe.sections[pe.section_index(".text")].raw_data_offset + pe.sections[pe.section_index(".text")].raw_data_size))