After the rule in issue #39 was commented out, the APT1_aspnetreport, and APT1_dbg_mess got borked, since both rules depended on the APT1_payloads.

New malware rules classification