From fb35bc372eb2474ae82a5671a67acfa3745b7bf3 Mon Sep 17 00:00:00 2001 From: 87owo <85057800+87owo@users.noreply.github.com> Date: Thu, 2 Jul 2026 22:12:14 +0800 Subject: [PATCH] Add files via upload --- Engine/Heuristic/Rules_General_A1.yar | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/Engine/Heuristic/Rules_General_A1.yar b/Engine/Heuristic/Rules_General_A1.yar index bc7a446..58b0c58 100644 --- a/Engine/Heuristic/Rules_General_A1.yar +++ b/Engine/Heuristic/Rules_General_A1.yar @@ -1437,3 +1437,22 @@ rule General_52 { uint16(0) == 0x5a4d and filesize < 2000KB and 8 of them } + +rule General_53 { + meta: + description = "53" + author = "PYAS Security" + date = "2026-07-02" + strings: + $s1 = "VUZsQlUxO" wide + $s2 = "VRaV04xY21s" wide + $s3 = "MGVW" wide + $s4 = "OUJkWFJvYjNKc" wide + $s5 = "GVtRjBhVz" wide + $s6 = "l1WDFabGNtbG" ascii + $s7 = "1hV05o" fullword ascii + $s8 = "ZEdsdmJnPT0=" ascii + condition: + uint16(0) == 0x5a4d and filesize > 20MB and + 7 of them +}