id: bublik-malware

info:
  name: Bublik Malware Detector
  author: daffainfo
  severity: info
  reference:
    - https://github.com/Yara-Rules/rules/blob/master/malware/MALW_Bublik.yar
  tags: malware,file
file:
  - extensions:
      - all
    matchers:
      - type: binary
        binary:
          - '636F6E736F6C6173'
          - '636C556E00696E666F2E696E69'
        condition: and
# digest: 4a0a00473045022100b707b7c005bcec5b542aa6ece403304b941bd1b5cedb0ac2864dd9b1196009dc0220605eb4aa7e3f41a8000ac4eb68bd5f50c1326b92652b391d7649705ee0385871:922c64590222798bb761d5b6d8e72950