diff options
| -rw-r--r-- | php-malware-finder/common.yar | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/php-malware-finder/common.yar b/php-malware-finder/common.yar index 3c4bd64..2add775 100644 --- a/php-malware-finder/common.yar +++ b/php-malware-finder/common.yar | |||
| @@ -17,6 +17,7 @@ private rule IRC | |||
| 17 | private rule base64 | 17 | private rule base64 |
| 18 | { | 18 | { |
| 19 | strings: | 19 | strings: |
| 20 | $user_agent = "SFRUUF9VU0VSX0FHRU5UCg" | ||
| 20 | $eval = "ZXZhbCg" | 21 | $eval = "ZXZhbCg" |
| 21 | $system = "c3lzdGVt" | 22 | $system = "c3lzdGVt" |
| 22 | $preg_replace = "cHJlZ19yZXBsYWNl" | 23 | $preg_replace = "cHJlZ19yZXBsYWNl" |