dlMarlboro Downloader Detection

This rule detects the dlMarlboro downloader based on specific byte patterns found within the executable. The patterns '$ping_apnic', '$download_bin_1', and '$download_bin_2' are indicative of the malware's code for network communication (pinging apnic) and downloading additional binaries.