Merge pull request #166 from plutec/master

Fixed duplicate identifier

malware/RAT_Xtreme.yar

@@ -109,7 +109,7 @@ rule xtremrat : rat
 		2 of them
 }
 
-rule xtreme_rat
+rule xtreme_rat_0
 { 
 	meta:
 		maltype = "Xtreme RAT"

utils/ip.yar

+/*
+    This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as
+    long as you use it under this license.
+*/
+
+rule IP {
+    meta:
+        author = "Antonio S. <asanchez@plutec.net>"
+    strings:
+        $ip = /([0-9]{1,3}\.){3}[0-9]{1,3}/ wide ascii
+    condition:
+        $ip
+}