revengerat yara rule

rule revengerat_mem {
strings:
        $s1="Revenge-RAT" wide ascii
        $s2="RV_MUTEX" wide ascii
        $s3="Nuclear Explosion.exe" wide ascii
        $s4="Nuclear_Explosion" wide ascii
condition:
        (3 of them)
}