Update signatures/common.yara
This commit is contained in:
parent
25c839c13c
commit
f81cb040c4
@ -15,6 +15,9 @@ rule CHINESE_NEZHA_ARGO {
|
|||||||
$a13 = "Server\x20is\x20running\x20on\x20port\x20"
|
$a13 = "Server\x20is\x20running\x20on\x20port\x20"
|
||||||
$a14 = "nysteria2"
|
$a14 = "nysteria2"
|
||||||
$a15 = "openssl req"
|
$a15 = "openssl req"
|
||||||
|
$a16 = "hysteria2"
|
||||||
|
$a17 = "NEZHA" nocase
|
||||||
|
$a18 = "babama1001980"
|
||||||
condition:
|
condition:
|
||||||
2 of ($a*)
|
2 of ($a*)
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user