Update vuln_paloalto_cve_2024_3400_apr24.yar

Neo23x0 · Neo23x0 · commit 864ff2b3ead3 · 2025-01-17T16:07:27.000+01:00
diff --git a/yara/vuln_paloalto_cve_2024_3400_apr24.yar b/yara/vuln_paloalto_cve_2024_3400_apr24.yar
@@ -95,5 +95,5 @@ rule SUSP_LNX_Base64_Exec_Apr24 : SCRIPT {
       
       $mirai = "country="
    condition:
-      any of them and not $mirai
+      1 of ($s*) and not $mirai
 }

Original file line number	Diff line number	Diff line change
`@@ -95,5 +95,5 @@ rule SUSP_LNX_Base64_Exec_Apr24 : SCRIPT {`
`95`	`95`
`96`	`96`	`$mirai = "country="`
`97`	`97`	`condition:`
`98`		`- any of them and not $mirai`
	`98`	`+ 1 of ($s*) and not $mirai`
`99`	`99`	`}`