From 2bd0a203dd70811b02ce9335dd94024e357517b3 Mon Sep 17 00:00:00 2001 From: Palma Solutions LTD Date: Thu, 28 Sep 2017 20:26:56 +0200 Subject: [PATCH] new pattern --- malware4.pl | 1 + 1 file changed, 1 insertion(+) diff --git a/malware4.pl b/malware4.pl index 506fb6f..ed15795 100644 --- a/malware4.pl +++ b/malware4.pl @@ -175,6 +175,7 @@ my @regexen = ( qr/<\?php\s+\$([A-z0-9]{1,20})\=\"([A-z0-9]{1})\"\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\.chr\(.+?\)\;\s+\?>/is, qr/<\!DOCTYPE\s+html>\s+Hacked\s+by\s+AnoaGhost.+?<\/html>/is, qr/GIF89a\s+BlaCkB0x\s+<\?\$k\=\"ass\"\.\"ert\"\;\s+\$k\(\$\{\"\_PO\"\.\"ST\"\}\s+\[\'admin1234\@\#\'\]\)\;\?>/is, + qr/ELF.+?blake256_final.+?persistentctxs/is, ); my @base64_decodes = (