diff options
| author | jvoisin | 2015-07-09 14:05:20 +0200 |
|---|---|---|
| committer | jvoisin | 2015-07-09 14:05:20 +0200 |
| commit | 06af8f15e46299a6bea00be8d86abcf290e41be4 (patch) | |
| tree | 0d053f01e774e7b2cfdcc0dd76dc65a005d7a109 | |
| parent | 51b64c6abb9f5d94ba57d2c5b91cd0efafa786f9 (diff) | |
Add whitelist for wordpress 3.2.1
| -rw-r--r-- | malwares.yara | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/malwares.yara b/malwares.yara index fe2c623..206acf0 100644 --- a/malwares.yara +++ b/malwares.yara | |||
| @@ -25,7 +25,13 @@ private rule IsWhitelisted | |||
| 25 | 25 | ||
| 26 | /* Wordpress 3.5.1 */ | 26 | /* Wordpress 3.5.1 */ |
| 27 | hash.sha1(0, filesize) == "833281b4d1113180e4d1ca026f5e85a680d52662" or // wp-includes/class-phpmailer.php | 27 | hash.sha1(0, filesize) == "833281b4d1113180e4d1ca026f5e85a680d52662" or // wp-includes/class-phpmailer.php |
| 28 | hash.sha1(0, filesize) == "b4e4b88f2be38ed9c3147b77c2f3a7f929caba2c" // wp-admin/includes/menu.php | 28 | hash.sha1(0, filesize) == "b4e4b88f2be38ed9c3147b77c2f3a7f929caba2c" or // wp-admin/includes/menu.php |
| 29 | |||
| 30 | /* Wordpress 3.2.1 */ | ||
| 31 | hash.sha1(0, filesize) == "b4f53b8c360f9e47cc63047305a0ce2e3ff6a251" or // wp-includes/functions.php | ||
| 32 | hash.sha1(0, filesize) == "ac8298df16a560c80fb213ef3f51f90df8ef5292" or // wp-includes/class-phpmailer.php | ||
| 33 | hash.sha1(0, filesize) == "232e4705e3aa28269c4d5e4a4a700bb7a2d06f24" // wp-admin/includes/menu.php | ||
| 34 | |||
| 29 | } | 35 | } |
| 30 | 36 | ||
| 31 | global private rule IsPhp | 37 | global private rule IsPhp |
