From 94f4d85fdaa21a120fe709b571e20216c5e6f538 Mon Sep 17 00:00:00 2001
From: Florian Roth <venom14@gmail.com>
Date: Wed, 24 Jul 2024 17:30:10 +0200
Subject: [PATCH] Update mal_go_modbus.yar

---
 yara/mal_go_modbus.yar | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/yara/mal_go_modbus.yar b/yara/mal_go_modbus.yar
index bcd41ae1..440de91e 100644
--- a/yara/mal_go_modbus.yar
+++ b/yara/mal_go_modbus.yar
@@ -21,7 +21,7 @@ rule MAL_Go_Modbus_Jul24_1 {
       filesize < 30MB
       and (
          $sa1
-         and 2 of ($sb*)
+         and 3 of ($sb*)
       )
-      or all of them
+      or 4 of them
 }