Update PureCrypter.yar

bartblaze · Mar 21, 2024 · 345c6c3 · 345c6c3
1 parent 098f0d9
commit 345c6c3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rules/crimeware/PureCrypter.yar b/rules/crimeware/PureCrypter.yar
@@ -34,5 +34,5 @@ strings:
     $x4 = {7B 00 31 00 31 00 31 00 31 00 31 00 2D 00 32 00 32 00 32 00 32 00 32 00 2D 00 34 00 30 00 30 00 30 00 31 00 2D 00 30 00 30 00 30 00 30 00 32 00 7D}
 
 condition:
-    3 of ($s*) or 3 of ($x*)
+    2 of ($s*) or 2 of ($x*)
 }