Merge pull request #6 from dcode/blog/mozin-about

Fix yara syntax

Author: peasead

blog/mozin-about/mozi-obfuscation-technique.yara

@@ -1,12 +1,14 @@
-rule Mozi Obfuscation Technique {
-   meta:
-       author =  "Elastic Security, Lars Wallenborn (@larsborn)"
-       description = "Detects obfuscation technique used by Mozi botnet."
-string:
-        $a = { 55 50 58 21
-              [4]         
-              00 00 00 00 
-              00 00 00 00 
-              00 00 00 00 }
-condition:
-        all of them
+rule MoziObfuscationTechnique
+{
+  meta:
+    author =  "Elastic Security, Lars Wallenborn (@larsborn)"
+    description = "Detects obfuscation technique used by Mozi botnet."
+  strings:
+    $a = { 55 50 58 21
+           [4]
+           00 00 00 00
+           00 00 00 00
+           00 00 00 00 }
+  condition:
+    all of them
+}