Amaday yara

rule amadey_bin_mem
{
    meta:
        author = " James_inthe_box"
        date = "2018/11"
        maltype = "Amadey"

    strings:
        $string1 = "&pc="
        $string2 = "&un="
        $string3 = "&nm="
        $string4 = "AddAtomA"

    condition:
        all of them