Sneed-Reactivity/yara-mikesxrs/malc0de/webc2_ugx_apt1.yar

9 lines
175 B
Text
Raw Permalink Normal View History

rule webc2_ugx : apt
{
strings:
$a = "!@#dmc#@!"
$b = "!@#tiuq#@!"
$c = "!@#troppusnu#@!"
condition:
filesize < 100KB and (3 of ($a,$b,$c))
}