new patterns

2018-05-17 11:11:35 +02:00
parent 2e00eb5c25
commit 7b2ea213f4
3 changed files with 7 additions and 3 deletions
--- a/malware6.pl
+++ b/malware6.pl
@@ -35,6 +35,7 @@ my @regexen = (
    qr/<\?php\s+if \(!isset\(\$sRetry\)\).+?\$stCurlLink = base64_decode\(.+?curl_close\(\$stCurlHandle\);.+?\?>/is,
    qr/eval\(\"\?\>\" \. base64_decode\(.+?\)\); \?>/is,
    qr/<\?php.+?\$alphabet =.+?exit\(\);.+?\$([A-z0-9]{1,20}) =.+?\"\"\.chr\(.+?\)\.\"\"\.chr\(.+?\)\.\"\\x.+?\]\.\$([A-z0-9]{1,20})\[\d\d\], \$([A-z0-9]{1,20})  ,\"([A-z0-9]{1,20})\"\);/is,
+    qr/<\? echo\(base64_decode\(.+?\)\);  \?>/is,

 );