Ursnif yara

rule Ursnif
{
    meta:
        author = " James_inthe_box"
        date = "2018/10"
        maltype = "Ursnif"

    strings:
        $string1 = "%02u-%02u-%02u"
        $string2 = "version=%u&soft=%u&user=%08x%08x%08x%08x&server=%u&id=%u&type=%u&name=%s"

    condition:
        all of them
}