Update signatures/common.yara

This commit is contained in:
Lin 2025-03-26 11:42:31 +01:00
parent 25c839c13c
commit f81cb040c4

View File

@ -15,6 +15,9 @@ rule CHINESE_NEZHA_ARGO {
$a13 = "Server\x20is\x20running\x20on\x20port\x20" $a13 = "Server\x20is\x20running\x20on\x20port\x20"
$a14 = "nysteria2" $a14 = "nysteria2"
$a15 = "openssl req" $a15 = "openssl req"
$a16 = "hysteria2"
$a17 = "NEZHA" nocase
$a18 = "babama1001980"
condition: condition:
2 of ($a*) 2 of ($a*)
} }