id: bublik-malware

info:
  name: Bublik Malware Detector
  author: daffainfo
  severity: info
  reference: https://github.com/Yara-Rules/rules/blob/master/malware/MALW_Bublik.yar
  tags: malware,file

file:
  - extensions:
      - all

    matchers:
      - type: binary
        binary:
          - '636F6E736F6C6173'
          - '636C556E00696E666F2E696E69'
        condition: and