Update vuln_paloalto_cve_2024_3400_apr24.yar

Neo23x0 · Jan 17, 2025 · 864ff2b · 864ff2b
1 parent 983cff1
commit 864ff2b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/yara/vuln_paloalto_cve_2024_3400_apr24.yar b/yara/vuln_paloalto_cve_2024_3400_apr24.yar
@@ -95,5 +95,5 @@ rule SUSP_LNX_Base64_Exec_Apr24 : SCRIPT {
       
       $mirai = "country="
    condition:
-      any of them and not $mirai
+      1 of ($s*) and not $mirai
 }