From 812f7b56214a394d76e8550853adc9be2bccae5d Mon Sep 17 00:00:00 2001
From: sandeep <8293321+ehsandeep@users.noreply.github.com>
Date: Mon, 6 Mar 2023 00:12:18 +0530
Subject: [PATCH] matcher update

---
 file/malware/malware_t5000.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/file/malware/malware_t5000.yaml b/file/malware/malware_t5000.yaml
index efd169bf5e..ffa214bdc6 100644
--- a/file/malware/malware_t5000.yaml
+++ b/file/malware/malware_t5000.yaml
@@ -12,8 +12,8 @@ file:
       - all
 
     matchers:
-      - type: binary
-        binary:
+      - type: word
+        words:
           - "_tmpR.vbs"
           - "_tmpg.vbs"
           - "Dtl.dat"
@@ -28,4 +28,4 @@ file:
           - "l:\\MyProject\\Vc 7.1\\T5000\\T5000Ver1.28\\Target\\4 CaptureDLL.pdb"
           - "f:\\Project\\T5000\\Src\\Target\\4 CaptureDLL.pdb"
           - "E:\\VS2010\\xPlat2\\Release\\InstRes32.pdb"
-        condition: and
\ No newline at end of file
+        condition: or
\ No newline at end of file