Sneed-Reactivity/yara-mikesxrs/malc0de/manitsme_apt1.yar

9 lines
175 B
Text
Raw Permalink Normal View History

rule manitsme : apt
{
strings:
$a = "rouji"
$b = "Visual Studio"
$c = "UglyGorilla"
condition:
filesize < 300KB and (5 of ($a,$b,$c))
}