From aa774f43301e75e08a7f4179044e3b3802c437f1 Mon Sep 17 00:00:00 2001 From: Gabor Gyorvari Date: Tue, 9 Aug 2022 09:18:07 +0200 Subject: [PATCH] Another obfuscated malware check --- definitions/patterns_raw.txt | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/definitions/patterns_raw.txt b/definitions/patterns_raw.txt index 9dd7be7..6ac277f 100644 --- a/definitions/patterns_raw.txt +++ b/definitions/patterns_raw.txt @@ -393,4 +393,9 @@ eval(rawurldecode(' # simple obfuscated function 'gz'.'unc'.'ompress' -'create'.'_'.'function' \ No newline at end of file +'create'.'_'.'function' +'gzinf', 'la', 'te' +'e_f', 'cti', 'un', 'on', 'cr', 'eat' +'base', '64_dec', 'ode' +'cook', 'set', 'ie' +'repl', 'str_', 'ace'