PR-47 comment and duplicate fix

Merge pull request #47 from cconversion/master
Update patterns_raw.txt
2026-06-16 12:30:35 +00:00 · 2019-05-17 13:21:04 +02:00 · 2019-05-17 13:16:55 +02:00 · 2019-02-11 05:53:33 +11:00
1 changed files with 9 additions and 1 deletions
--- a/definitions/patterns_raw.txt
+++ b/definitions/patterns_raw.txt
@@ -261,6 +261,14 @@ tmhapbzcerff
 IndoXploit
 FaisaL Ahmed aka rEd X

+# WP-VCD Malware https://www.getastra.com/blog/911/how-to-fix-wp-vcd-backdoor-hack-in-wordpress-functions-php/
+wp-vcd
+class.theme-modules.php
+wp-tmp.php
+tmpcontentx
+function wp_temp_setupx
+derna.top/code.php
+stripos($tmpcontent, $wp_auth_key)

 #Miscellaneous
 uname -a
@@ -362,4 +370,4 @@ ZeroByte
 100, 111, 99, 117, 109, 101, 110, 116, 46, 99, 114, 101, 97, 116, 101, 69, 108, 101, 109, 101, 110, 116, 40, 39, 115, 99, 114, 105, 112, 116, 39, 41, 59

 # JS escaped: String.fromCharCode(
-83, 116, 114, 105, 110, 103, 46, 102, 114, 111, 109, 67, 104, 97, 114, 67, 111, 100, 101, 40
+83, 116, 114, 105, 110, 103, 46, 102, 114, 111, 109, 67, 104, 97, 114, 67, 111, 100, 101, 40
Author	SHA1	Message	Date
Gabor Gyorvari	8030cec89f	PR-47 comment and duplicate fix	2019-05-17 13:21:04 +02:00
Győrvári Gábor	9ec295f80d	Merge pull request #47 from cconversion/master Update patterns_raw.txt	2019-05-17 13:16:55 +02:00
cconversion	c1c71bd9ef	Update patterns_raw.txt Added WP-VCD Malware strings	2019-02-11 05:53:33 +11:00