summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjvoisin2015-07-09 14:02:31 +0200
committerjvoisin2015-07-09 14:02:31 +0200
commit51b64c6abb9f5d94ba57d2c5b91cd0efafa786f9 (patch)
tree5b4ef9b1a11cb9ba7cd9f1380d197836445cfa59
parent7b4a39bb2d44b0cc1119aa8ba10caed7ebedb5e3 (diff)
Add a whitelist for wordpress 3.5.1
-rw-r--r--malwares.yara6
1 files changed, 5 insertions, 1 deletions
diff --git a/malwares.yara b/malwares.yara
index 0ec4eee..fe2c623 100644
--- a/malwares.yara
+++ b/malwares.yara
@@ -21,7 +21,11 @@ private rule IsWhitelisted
21 /* Prestashop 1.6.1.0 */ 21 /* Prestashop 1.6.1.0 */
22 hash.sha1(0, filesize) == "544cd822e2195ac162c9f0387031709042a72cfd" or // tools/htmlpurifier/HTMLPurifier.standalone.php 22 hash.sha1(0, filesize) == "544cd822e2195ac162c9f0387031709042a72cfd" or // tools/htmlpurifier/HTMLPurifier.standalone.php
23 hash.sha1(0, filesize) == "bb8c0d735809b9412265729906016329f3e681ff" or // classes/webservice/WebserviceOutputJSON.php 23 hash.sha1(0, filesize) == "bb8c0d735809b9412265729906016329f3e681ff" or // classes/webservice/WebserviceOutputJSON.php
24 hash.sha1(0, filesize) == "15da986fccdc7104f9d4e8c344f332db5ae9a32b" // classes/Tools.php 24 hash.sha1(0, filesize) == "15da986fccdc7104f9d4e8c344f332db5ae9a32b" or // classes/Tools.php
25
26 /* Wordpress 3.5.1 */
27 hash.sha1(0, filesize) == "833281b4d1113180e4d1ca026f5e85a680d52662" or // wp-includes/class-phpmailer.php
28 hash.sha1(0, filesize) == "b4e4b88f2be38ed9c3147b77c2f3a7f929caba2c" // wp-admin/includes/menu.php
25} 29}
26 30
27global private rule IsPhp 31global private rule IsPhp