xml/ftp_banners.xml in recog-2.0.8 vs xml/ftp_banners.xml in recog-2.0.9
- old
+ new
@@ -902,6 +902,14 @@
<example>FTP server is ready.</example>
<example>FTP Server ready.</example>
<example>FTP Server Ready</example>
<example>FTP service ready.</example>
</fingerprint>
+
+ <fingerprint pattern="^Welcom to ProRat Ftp Server$">
+ <description>The FTP server of the ProRat malware</description>
+ <example>Welcom to ProRat Ftp Server</example>
+ <param pos="0" name="service.vendor" value="Pro Group"/>
+ <param pos="0" name="service.product" value="ProRat"/>
+ </fingerprint>
+
</fingerprints>