From 16389c3f2163d15c7d3d0e0c9566a6311ecc8f5f Mon Sep 17 00:00:00 2001 From: Julien (jvoisin) Voisin Date: Mon, 16 May 2016 09:58:12 +0200 Subject: Add USER_AGENT in b64 --- php-malware-finder/common.yar | 1 + 1 file changed, 1 insertion(+) diff --git a/php-malware-finder/common.yar b/php-malware-finder/common.yar index 3c4bd64..2add775 100644 --- a/php-malware-finder/common.yar +++ b/php-malware-finder/common.yar @@ -17,6 +17,7 @@ private rule IRC private rule base64 { strings: + $user_agent = "SFRUUF9VU0VSX0FHRU5UCg" $eval = "ZXZhbCg" $system = "c3lzdGVt" $preg_replace = "cHJlZ19yZXBsYWNl" -- cgit v1.3