matcher update

2023-03-06 00:12:18 +05:30 · 2023-03-06 00:12:18 +05:30 · 812f7b5621
parent 49c0820cde
commit 812f7b5621
1 changed files with 3 additions and 3 deletions
--- a/file/malware/malware_t5000.yaml
+++ b/file/malware/malware_t5000.yaml
@ -12,8 +12,8 @@ file:
      - all

    matchers:
-      - type: binary
-        binary:
+      - type: word
+        words:
          - "_tmpR.vbs"
          - "_tmpg.vbs"
          - "Dtl.dat"
@ -28,4 +28,4 @@ file:
          - "l:\\MyProject\\Vc 7.1\\T5000\\T5000Ver1.28\\Target\\4 CaptureDLL.pdb"
          - "f:\\Project\\T5000\\Src\\Target\\4 CaptureDLL.pdb"
          - "E:\\VS2010\\xPlat2\\Release\\InstRes32.pdb"
-        condition: and
+        condition: or