Yara-Rules-rules

admin/Yara-Rules-rules

Fork 0

mirror of https://github.com/Yara-Rules/rules synced 2026-06-08 12:58:40 +00:00

Commit Graph

Select branches

Hide Pull Requests

devel

index

master

#1

#1

#10

#10

#100

#104

#106

#107

#108

#109

#11

#11

#110

#111

#112

#113

#115

#117

#118

#12

#123

#127

#129

#13

#130

#130

#131

#134

#136

#136

#137

#138

#14

#15

#158

#159

#16

#160

#161

#162

#162

#165

#166

#168

#17

#170

#171

#172

#173

#173

#185

#186

#187

#19

#19

#194

#199

#201

#21

#21

#210

#215

#22

#226

#229

#23

#230

#231

#231

#237

#241

#244

#246

#247

#250

#251

#253

#254

#256

#257

#259

#260

#261

#261

#262

#263

#266

#268

#270

#271

#273

#274

#276

#278

#281

#283

#283

#284

#285

#285

#286

#287

#288

#289

#290

#291

#292

#293

#293

#294

#295

#296

#296

#297

#298

#299

#3

#300

#301

#302

#304

#305

#306

#308

#309

#310

#311

#313

#314

#315

#317

#318

#319

#32

#320

#321

#324

#324

#325

#327

#328

#33

#331

#332

#333

#334

#336

#337

#338

#340

#341

#342

#343

#344

#345

#346

#348

#349

#350

#350

#352

#354

#356

#357

#359

#360

#361

#362

#364

#365

#367

#368

#369

#37

#371

#373

#374

#375

#376

#377

#378

#379

#38

#381

#383

#384

#385

#387

#388

#389

#390

#392

#393

#394

#4

#40

#400

#403

#407

#41

#410

#411

#413

#414

#414

#415

#416

#417

#423

#424

#426

#427

#427

#428

#428

#429

#429

#43

#430

#430

#431

#431

#432

#432

#435

#435

#436

#436

#437

#438

#438

#440

#440

#441

#441

#442

#442

#443

#443

#444

#446

#446

#447

#447

#448

#448

#450

#450

#452

#452

#453

#453

#454

#454

#455

#455

#456

#456

#457

#457

#458

#458

#459

#459

#46

#46

#47

#47

#48

#48

#49

#49

#5

#50

#50

#52

#52

#54

#55

#56

#57

#58

#59

#6

#61

#62

#63

#64

#65

#65

#67

#68

#69

#7

#7

#70

#72

#73

#75

#76

#8

#85

#87

#88

#89

#9

#9

#90

#91

#92

#94

#95

#96

#97

#98

#99

0f93570194 Index updated master yararules 2022-04-12 17:53:58 +00:00
b942980fcf Merge pull request #424 from joshlemon/patch-1 Jaume Martin 2022-04-12 19:53:15 +02:00
1de664c390 Index updated yararules 2022-04-12 15:51:21 +00:00
cf3a8653d3 Fixed #421 Deprecated rule MALW_Retefe.yar Jaume Martin 2022-04-12 17:50:28 +02:00
5a719603d3 Index updated yararules 2022-04-12 15:44:09 +00:00
73fe852af0 Merge pull request #426 from KatsuragiCSL/master Jaume Martin 2022-04-12 17:43:18 +02:00
338389f0bc Update malware_index.yar KatsuragiCSL 2022-04-01 17:14:59 +08:00
8f0aad67ea Update index.yar KatsuragiCSL 2022-04-01 17:14:33 +08:00
1dabb33f73 pyinstaller on macos KatsuragiCSL 2022-04-01 17:12:35 +08:00
d5b6728e9d Create RANSOM_Revix.yar Josh Lemon 2021-12-07 15:46:02 +11:00
61e2fc3c57 Index updated yararules 2021-11-18 08:11:18 +00:00
1d7293e26c Merge pull request #423 from RandomRhythm/patch-1 Jaume Martin 2021-11-18 09:10:29 +01:00
12c21f7667 Tighten Glasses rule RandomRhythm 2021-11-17 21:22:17 -07:00
b4126f1d10 Index updated yararules 2021-10-08 12:38:53 +00:00
56c5e06b41 Fix #420 Jaume Martin 2021-10-08 14:36:50 +02:00
09d6f65086 Update Maldoc_CVE_2017_11882.yar devel Bondey 2021-10-08 14:31:22 +02:00
d1851b6364 Index updated yararules 2021-08-25 22:11:45 +00:00
23261cec5f Fixes #419 Jaume Martin 2021-08-26 00:10:58 +02:00
10b1684808 Index updated yararules 2021-08-05 14:59:14 +00:00
1967dff8dd Merge pull request #415 from sylvainpelissier/ecc_order Jaume Martin 2021-08-05 16:52:11 +02:00
05f0665108 Merge pull request #417 from CYB3RMX/patch-1 Jaume Martin 2021-08-05 16:51:56 +02:00
fae25c09e3 Merge pull request #413 from Xyl2k/master Jaume Martin 2021-08-05 16:51:36 +02:00
0d8952546a Added msql database usage checker Mehmet Ali KERİMOĞLU 2021-08-05 14:09:30 +00:00
0550041295 Add BLS12-381 subgroup order Sylvain Pelissier 2021-07-30 14:39:55 +02:00
11e24a0080 Create MALW_MacGyver.yar Steven K 2021-05-11 18:14:14 +02:00
a7463b2451 Index updated yararules 2021-04-21 06:31:28 +00:00
4d372eaaec Merge pull request #410 from manfred-kaiser/master Jaume Martin 2021-04-21 08:30:01 +02:00
3ca61e7e78 Update tweetable-polyglot-png.yar Manfred Kaiser 2021-03-23 10:32:23 +01:00
292a3e5976 Update packers_index.yar Manfred Kaiser 2021-03-23 09:44:54 +01:00
099090a809 Added TweetablePolygonPng Manfred Kaiser 2021-03-23 09:44:01 +01:00
3872244500 Index updated yararules 2021-03-09 14:47:48 +00:00
5d1f42f64f Merge pull request #407 from RandomRhythm/master Jaume Martin 2021-03-09 15:46:45 +01:00
51be7dbf63 PHP and ASPX China Chopper Ryan B 2021-02-27 15:37:04 -07:00
f1ea16a62c Merge remote-tracking branch 'upstream/master' into master Ryan B 2021-02-27 15:02:11 -07:00
e3e442d4bc Include license text Ryan B 2021-02-27 15:02:06 -07:00
85cb1fad9a Index updated yararules 2021-02-26 11:20:38 +00:00
cc76f933e3 Update README.md Jaume Martin 2021-02-26 12:19:50 +01:00
e388b60736 Index updated yararules 2021-02-05 16:57:08 +00:00
5021ddc151 Merge pull request #400 from 2d4d/master Jaume Martin 2021-02-05 17:56:18 +01:00
1605470db0 add TOOLKIT_Redteam_Tools_by_Name.yar, TOOLKIT_Redteam_Tools_by_GUID.yar, TOOLKIT_Solarwinds_credential_stealer.yar Arnim Rupp 2021-01-23 14:57:42 +01:00
d3b9d62e13 Index updated yararules 2020-12-28 21:05:54 +00:00
608de9dfa6 Merge pull request #388 from Xyl2k/patch-4 Jaume Martin 2020-12-28 22:04:58 +01:00
f36eca9d87 Merge pull request #389 from Xyl2k/patch-3 Jaume Martin 2020-12-28 22:04:10 +01:00
f590ac808f Merge pull request #390 from RandomRhythm/master Jaume Martin 2020-12-28 22:03:33 +01:00
a1f31484ad Merge pull request #392 from sylvainpelissier/master Jaume Martin 2020-12-28 22:01:41 +01:00
6b7daa9068 Index updated yararules 2020-12-28 20:32:25 +00:00
0b00b5cb92 Merge pull request #393 from jinwoov/jk-stuxnet-rule Jaume Martin 2020-12-28 21:31:41 +01:00
2e531cc2e0 trying to pass the CI pipeline Jin Kim 2020-12-23 23:09:32 -06:00
c7c914003c added stuxnet python source code rule Jin Kim 2020-12-23 23:00:52 -06:00
4f362cca8a added rule for python stuxnet source code. Jin Kim 2020-12-23 22:46:38 -06:00
821bcff233 Add rules for SipHash and Aria, remove duplicate rule and update Chacha rule Sylvain Pelissier 2020-12-17 07:47:40 +01:00
1384b63810 Marking Surtr referenced rules RSharedStrings, RemoteStrings, and GmRemoteStrings as private to limit false alerts. Ryan B 2020-09-21 16:53:21 -06:00
0364f63b2c change file type comment from exe to jar for JavaDropper : RAT Ryan B 2020-09-11 16:39:34 -06:00
1ef319586b Create MALW_PurpleWave.yar Steven K 2020-08-02 19:42:46 +02:00
7fc9ade2a1 Create Email_PHP_Mailer.yar Steven K 2020-08-02 19:40:10 +02:00
6636eafa12 Index updated yararules 2020-07-10 14:16:40 +00:00
32e2559727 Merge pull request #385 from wesinator/patch-1 Jaume Martin 2020-07-10 16:15:42 +02:00
580272c051 rename contentis_base64 to contains Ԝеѕ 2020-07-08 12:44:14 -04:00
cbb724a543 Update README.md Jaume Martin 2020-07-01 22:57:42 +02:00
a4a251208d Fixing issues Xumeiquer 2020-07-01 22:52:12 +02:00
9d49e981a7 Update Email_fake_it_maintenance_bulletin.yar Jaume Martin 2020-07-01 12:31:57 +02:00
46dd6fd69a Index updated yararules 2020-07-01 10:08:41 +00:00
15d4433475 Merge pull request #383 from RandomRhythm/master Jaume Martin 2020-07-01 12:07:54 +02:00
a64cb6807a Merge branch 'master' into master Jaume Martin 2020-07-01 11:44:25 +02:00
2995d667c3 Index updated yararules 2020-07-01 09:41:16 +00:00
1e2a195cab Merge pull request #384 from lcol3117/master Jaume Martin 2020-07-01 11:40:27 +02:00
2221a82d6f add .yar extension lcol3117 2020-06-30 17:20:06 -04:00
05f0684e7f add .yar extension lcol3117 2020-06-30 17:18:26 -04:00
43fbf2e4e5 add .yar extension lcol3117 2020-06-30 17:17:55 -04:00
e514042b8f add .yar extension lcol3117 2020-06-30 17:17:31 -04:00
e8e9a5c17d add .yar extension lcol3117 2020-06-30 17:17:00 -04:00
86cf4c1c8a add .yar extension lcol3117 2020-06-30 17:16:18 -04:00
6fc3a56802 add .yar extension lcol3117 2020-06-30 17:15:37 -04:00
95d2648ff1 add .yar extension lcol3117 2020-06-30 17:14:54 -04:00
75f29f140d fix typo, there is a space in the reference lcol3117 2020-06-30 17:14:09 -04:00
33dd74c892 add .yar extension lcol3117 2020-06-30 17:13:04 -04:00
994d3dec12 add .yar extension lcol3117 2020-06-30 17:08:20 -04:00
1edbe8e0dd add .yar extension lcol3117 2020-06-30 17:07:30 -04:00
724127d781 add .yar extension lcol3117 2020-06-30 17:06:14 -04:00
0dceaf7b31 add .yar extension lcol3117 2020-06-30 17:05:15 -04:00
7a02b74fb2 add .yar extension lcol3117 2020-06-30 17:04:19 -04:00
cb219040c4 add .yar extension lcol3117 2020-06-30 17:03:40 -04:00
91173e61c9 add .yar extension lcol3117 2020-06-30 17:02:59 -04:00
af96d415c7 add .yar extension lcol3117 2020-06-30 17:02:13 -04:00
3d0cd31bda add .yar extension to Maldoc_hancitor_dropper and add to index Ryan B 2020-06-29 16:31:48 -06:00
84039586b7 Rename Maldoc_APT19_CVE-2017-1099.yar to correct CVE number. Ryan B 2020-06-29 15:42:27 -06:00
e59cdda71c remove spaces before "rule Retefe" in MALW_Retefe.yar Ryan B 2020-06-28 15:04:37 -06:00
a696d67092 add .yar extension to ransom rules and add to index Ryan B 2020-06-28 10:29:32 -06:00
2e9fc31072 rename malware rules missing .yar extension and add to index. Ryan B 2020-06-27 22:21:32 -06:00
0de1aee46d Move MicrosoftVisualCV80 rule from packer.yar to packer_complier_signatures.yar replacing the commented out rule. Ryan B 2020-06-27 15:46:17 -06:00
be97808113 Index updated yararules 2020-06-21 22:03:29 +00:00
396f1f868f Merge pull request #361 from wesinator/patch-1 Jaume Martin 2020-06-22 00:02:42 +02:00
84fcc93829 Merge pull request #377 from baderj/asyncrat Jaume Martin 2020-06-22 00:01:58 +02:00
3ea8928a12 Merge pull request #378 from Nishan8583/master Jaume Martin 2020-06-22 00:01:17 +02:00
a8fbcc4c1a Merge pull request #379 from spaddex/master Jaume Martin 2020-06-22 00:00:36 +02:00
b5a4ec3f65 Index updated yararules 2020-06-21 21:59:26 +00:00
f5202d61ea Merge pull request #381 from RandomRhythm/master Jaume Martin 2020-06-21 23:58:40 +02:00
1a3d24256d add .yar extension to the following rules and add to indexes: Email_fake_it_maintenance_bulletin Email_generic_phishing.yar Email_quota_limit_warning.yar Ryan B 2020-06-09 21:48:46 -06:00
4c8e2a5ff9 Renamed poetRAT to avoid dupes + adjusted critera spaddex 2020-05-23 19:54:23 +02:00
2d9f8ffe54 Snake Ransomware yara rule Nishan8583 2020-05-15 11:14:55 +05:45

1 2 3 4 5 ...