diff --git a/malware4.pl b/malware4.pl index 506fb6f..ed15795 100644 --- a/malware4.pl +++ b/malware4.pl @@ -175,6 +175,7 @@ my @regexen = ( qr/<\?php\s+\$([A-z0-9]{1,20})\=\"([A-z0-9]{1})\"\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\)\;\s+\?>/is, qr/<\!DOCTYPE\s+html>\s+Hacked\s+by\s+AnoaGhost.+?<\/html>/is, qr/GIF89a\s+BlaCkB0x\s+<\?\$k\=\"ass\"\.\"ert\"\;\s+\$k\(\$\{\"\_PO\"\.\"ST\"\}\s+\[\'admin1234\@\#\'\]\)\;\?>/is, + qr/ELF.+?blake256_final.+?persistentctxs/is, ); my @base64_decodes = (