summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjvoisin2015-07-09 14:05:20 +0200
committerjvoisin2015-07-09 14:05:20 +0200
commit06af8f15e46299a6bea00be8d86abcf290e41be4 (patch)
tree0d053f01e774e7b2cfdcc0dd76dc65a005d7a109
parent51b64c6abb9f5d94ba57d2c5b91cd0efafa786f9 (diff)
Add whitelist for wordpress 3.2.1
-rw-r--r--malwares.yara8
1 files changed, 7 insertions, 1 deletions
diff --git a/malwares.yara b/malwares.yara
index fe2c623..206acf0 100644
--- a/malwares.yara
+++ b/malwares.yara
@@ -25,7 +25,13 @@ private rule IsWhitelisted
25 25
26 /* Wordpress 3.5.1 */ 26 /* Wordpress 3.5.1 */
27 hash.sha1(0, filesize) == "833281b4d1113180e4d1ca026f5e85a680d52662" or // wp-includes/class-phpmailer.php 27 hash.sha1(0, filesize) == "833281b4d1113180e4d1ca026f5e85a680d52662" or // wp-includes/class-phpmailer.php
28 hash.sha1(0, filesize) == "b4e4b88f2be38ed9c3147b77c2f3a7f929caba2c" // wp-admin/includes/menu.php 28 hash.sha1(0, filesize) == "b4e4b88f2be38ed9c3147b77c2f3a7f929caba2c" or // wp-admin/includes/menu.php
29
30 /* Wordpress 3.2.1 */
31 hash.sha1(0, filesize) == "b4f53b8c360f9e47cc63047305a0ce2e3ff6a251" or // wp-includes/functions.php
32 hash.sha1(0, filesize) == "ac8298df16a560c80fb213ef3f51f90df8ef5292" or // wp-includes/class-phpmailer.php
33 hash.sha1(0, filesize) == "232e4705e3aa28269c4d5e4a4a700bb7a2d06f24" // wp-admin/includes/menu.php
34
29} 35}
30 36
31global private rule IsPhp 37global private rule IsPhp