diff options
| -rw-r--r-- | malwares.yara | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/malwares.yara b/malwares.yara index fe2c623..206acf0 100644 --- a/malwares.yara +++ b/malwares.yara | |||
| @@ -25,7 +25,13 @@ private rule IsWhitelisted | |||
| 25 | 25 | ||
| 26 | /* Wordpress 3.5.1 */ | 26 | /* Wordpress 3.5.1 */ |
| 27 | hash.sha1(0, filesize) == "833281b4d1113180e4d1ca026f5e85a680d52662" or // wp-includes/class-phpmailer.php | 27 | hash.sha1(0, filesize) == "833281b4d1113180e4d1ca026f5e85a680d52662" or // wp-includes/class-phpmailer.php |
| 28 | hash.sha1(0, filesize) == "b4e4b88f2be38ed9c3147b77c2f3a7f929caba2c" // wp-admin/includes/menu.php | 28 | hash.sha1(0, filesize) == "b4e4b88f2be38ed9c3147b77c2f3a7f929caba2c" or // wp-admin/includes/menu.php |
| 29 | |||
| 30 | /* Wordpress 3.2.1 */ | ||
| 31 | hash.sha1(0, filesize) == "b4f53b8c360f9e47cc63047305a0ce2e3ff6a251" or // wp-includes/functions.php | ||
| 32 | hash.sha1(0, filesize) == "ac8298df16a560c80fb213ef3f51f90df8ef5292" or // wp-includes/class-phpmailer.php | ||
| 33 | hash.sha1(0, filesize) == "232e4705e3aa28269c4d5e4a4a700bb7a2d06f24" // wp-admin/includes/menu.php | ||
| 34 | |||
| 29 | } | 35 | } |
| 30 | 36 | ||
| 31 | global private rule IsPhp | 37 | global private rule IsPhp |
