Update signatures/common.yara

2025-03-26 11:42:31 +01:00 · 2025-03-26 11:42:31 +01:00 · f81cb040c4
commit f81cb040c4
parent 25c839c13c
1 changed files with 3 additions and 0 deletions
--- a/signatures/common.yara
+++ b/signatures/common.yara
@ -15,6 +15,9 @@ rule CHINESE_NEZHA_ARGO {
        $a13 = "Server\x20is\x20running\x20on\x20port\x20"
        $a14 = "nysteria2"
        $a15 = "openssl req"
+        $a16 = "hysteria2"
+        $a17 = "NEZHA" nocase
+        $a18 = "babama1001980"
    condition:
        2 of ($a*)
 }