diff --git a/file/malware/warp-malware.yaml b/file/malware/warp-malware.yaml
index bcf2e9b53a..117474c917 100644
--- a/file/malware/warp-malware.yaml
+++ b/file/malware/warp-malware.yaml
@@ -18,7 +18,7 @@ file:
           - "/2011/n325423.shtml?"
           - "wyle"
           - "\\~ISUN32.EXE"
-        condition: or
+        condition: and
 
       - type: binary
         binary: