Fix yara syntax

dcode · dcode · commit 85685569fe1c · 2021-07-01T15:47:40.000-05:00
diff --git a/blog/mozin-about/mozi-obfuscation-technique.yara b/blog/mozin-about/mozi-obfuscation-technique.yara
@@ -1,12 +1,14 @@
-rule Mozi Obfuscation Technique {
+rule MoziObfuscationTechnique
+{
    meta:
        author =  "Elastic Security, Lars Wallenborn (@larsborn)"
        description = "Detects obfuscation technique used by Mozi botnet."
-string:
+  strings:
         $a = { 55 50 58 21
-              [4]         
-              00 00 00 00 
-              00 00 00 00 
+              [4]
+              00 00 00 00
+              00 00 00 00
               00 00 00 00 }
-condition:
+  condition:
         all of them
+}
