admin/Yara-Rules-rules
1
0
Fork 0
mirror of https://github.com/Yara-Rules/rules synced 2026-06-08 12:58:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
0671d405eb13ef665c2911877674deb00a1eedbe
Yara-Rules-rules/malware
T
History
mmorenog 0671d405eb Create crime_upatre_oct15.yar
2015-10-14 15:09:13 +02:00
..
Adzok_RAT.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
Anthem_DeepPanda.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT1.yar
Fixed the APT1_aspnetreport and APT1_dbg_mess
2015-09-21 11:13:41 -04:00
APT3102.yar
New classification
2015-04-28 09:17:53 +02:00
APT9002.yar
Add FE_APT_9002 from nyx0 PR
2015-05-04 16:50:35 +02:00
APT_alienspy_RAT.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_APT17.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_backspace.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_bluetermite_emdivi.yar
Create APT_bluetermite_emdivi.yar
2015-08-24 08:57:43 +02:00
APT_c16.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_Carbanak2.yar
Create APT_Carbanak2.yar
2015-09-07 13:00:56 +02:00
APT_Careto.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_CheshireCat.yar
Create APT_CheshireCat.yar
2015-08-10 08:26:02 +02:00
APT_Cloudduke.yar
Create APT_Cloudduke.yar
2015-07-28 09:01:10 +02:00
APT_CVE2015_5119.yar
Create APT_CVE2015_5119.yar
2015-08-13 12:45:42 +02:00
APT_DeputyDog_Fexel.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_Duqu2.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_HackingTeam.yar
Update APT_HackingTeam.yar
2015-07-20 13:27:39 +02:00
APT_Hellsing.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_Hikit.yar
New classification
2015-04-28 09:17:53 +02:00
APT_indetectables_RAT.yar
Create APT_indetectables_RAT.yar
2015-10-05 09:10:14 +02:00
APT_Irontiger_Trendmicro.yar
Create APT_Irontiger_Trendmicro.yar
2015-09-18 10:04:34 +02:00
APT_irontiger.yara
Create APT_irontiger.yara
2015-09-18 10:03:27 +02:00
APT_Kaba.yar
New classification
2015-04-28 09:17:53 +02:00
APT_korplug_fast.yar
Create APT_korplug_fast.yar
2015-08-24 08:08:53 +02:00
APT_Laudanum_Webshells.yar
Create APT_Laudanum_Webshells.yar
2015-06-24 13:23:49 +02:00
APT_LotusBlossom.yar
Create APT_LotusBlossom.yar
2015-06-23 13:23:38 +02:00
APT_Minidionis.yar
Create APT_Minidionis.yar
2015-07-28 09:02:03 +02:00
APT_Mirage.yar
Added mirage rule
2015-05-07 00:07:23 +02:00
APT_Molerats.yar
Addedd op molerats
2015-05-26 18:15:53 +02:00
APT_Mongall.yar
New classification
2015-04-28 09:17:53 +02:00
APT_NGO_wuaclt.yar
New classification
2015-04-28 09:17:53 +02:00
APT_OLE_JSRat.yar
newline at end of file
2015-06-25 09:34:17 +02:00
APT_OPCleaver.yar
New classification
2015-04-28 09:17:53 +02:00
APT_passthehashtoolkit.yar
Create APT_passthehashtoolkit.yar
2015-07-28 09:03:22 +02:00
APT_pcclient.yar
New classification
2015-04-28 09:17:53 +02:00
APT_putterpanda.yar
Create APT_putterpanda.yar
2015-06-17 10:19:54 +02:00
APT_quarkspwdump.yar
Create APT_quarkspwdump.yar
2015-10-05 09:15:16 +02:00
APT_Regin.yar
Copied warning about false positives from Loki's repository
2015-05-20 16:09:06 +02:00
APT_Seaduke_Unit42.yar
Create APT_Seaduke_Unit42.yar
2015-07-16 14:42:14 +02:00
APT_Sofacy_xtunnel_bundestag.yar
Create APT_Sofacy_xtunnel_bundestag.yar
2015-06-24 13:25:02 +02:00
APT_Terracota_Liudoor.yar
Create APT_Terracota_Liudoor.yar
2015-08-05 08:42:59 +02:00
APT_Terracota.yar
Create APT_Terracota.yar
2015-08-05 08:46:49 +02:00
APT_threatgroup_3390.yar
Update APT_threatgroup_3390.yar
2015-08-24 08:25:48 +02:00
APT_unit78020_malware.yar
Create APT_unit78020_malware.yar
2015-09-25 08:43:47 +02:00
APT_WildNeutron.yar
Create APT_WildNeutron.yar
2015-07-16 14:43:35 +02:00
APT_Winnti.yar
Create APT_Winnti.yar
2015-10-13 10:10:50 +02:00
Babar.yar
New classification
2015-04-28 09:17:53 +02:00
Backdoor_WinntiPharma.yar
Create Backdoor_WinntiPharma.yar
2015-06-23 13:25:58 +02:00
Bangat.yar
New classification
2015-04-28 09:17:53 +02:00
BlackEnergy.yar
New classification
2015-04-28 09:17:53 +02:00
BlackShades.yar
Update BlackShades.yar
2015-05-25 09:34:36 +02:00
Bolonyokte.yar
New classification
2015-04-28 09:17:53 +02:00
Boouset.yar
New classification
2015-04-28 09:17:53 +02:00
Bublik_downloader.yar
New classification
2015-04-28 09:17:53 +02:00
Casper.yar
New classification
2015-04-28 09:17:53 +02:00
Cerberus.yar
New classification
2015-04-28 09:17:53 +02:00
Citadel.yar
Update Citadel.yar
2015-05-26 13:18:29 +02:00
Cookies.yar
New classification
2015-04-28 09:17:53 +02:00
crime_upatre_oct15.yar
Create crime_upatre_oct15.yar
2015-10-14 15:09:13 +02:00
Crimson_RAT.yar
Rename Crimson_RAT to Crimson_RAT.yar
2015-05-25 09:50:49 +02:00
cxpid.yar
New classification
2015-04-28 09:17:53 +02:00
DarkComet.yar
Solve problem with last commit
2015-05-26 20:37:14 +02:00
Derusbi.yar
New classification
2015-04-28 09:17:53 +02:00
Dexter.yar
New classification
2015-04-28 09:17:53 +02:00
Dridex.yar
New classification
2015-04-28 09:17:53 +02:00
dubrute.yar
Adding new rules from pr/52
2015-09-09 20:38:39 +02:00
Enfal.yar
Update Enfal.yar
2015-05-26 12:40:07 +02:00
Equation.yar
Update Equation.yar
2015-10-05 09:19:57 +02:00
exploit_cve_2015_1701.yar
Create exploit_cve_2015_1701.yar
2015-05-20 13:52:27 +02:00
Exploit_CVE_2015_2426.yar
Create Exploit_CVE_2015_2426.yar
2015-07-22 11:06:36 +02:00
exploit_uac_elevators.yar
Create exploit_uac_elevators.yar
2015-06-17 10:25:19 +02:00
Ezcob.yar
New classification
2015-04-28 09:17:53 +02:00
F0xy.yar
New classification
2015-04-28 09:17:53 +02:00
FakeM.yar
New classification
2015-04-28 09:17:53 +02:00
favorite.yar
New classification
2015-04-28 09:17:53 +02:00
FinSpy.yar
New classification
2015-04-28 09:17:53 +02:00
FiveEyes.yar
New classification
2015-04-28 09:17:53 +02:00
FlyingKitten.yar
Added flying kitten rules
2015-05-06 23:15:19 +02:00
gen_faked_versions.yar
Create gen_faked_versions.yar
2015-09-15 09:59:28 +02:00
general_cloaking.yar
Update general_cloaking.yar
2015-09-15 09:57:35 +02:00
Gh0st.yar
New classification
2015-04-28 09:17:53 +02:00
Gholee.yar
Update Gholee.yar
2015-05-04 13:47:59 +02:00
Glasses.yar
New classification
2015-04-28 09:17:53 +02:00
Grozlex.yar
New classification
2015-04-28 09:17:53 +02:00
HackTools.yar
fix a weird quotation character
2015-07-31 15:19:58 -04:00
Havex.yar
Added Havex rules
2015-05-06 23:42:31 +02:00
iexpl0ree.yar
New classification
2015-04-28 09:17:53 +02:00
IMuler.yar
New classification
2015-04-28 09:17:53 +02:00
Install11.yar
New classification
2015-04-28 09:17:53 +02:00
Intel_Virtualization.yar
New classification
2015-04-28 09:17:53 +02:00
jRAT.yar
New classification
2015-04-28 09:17:53 +02:00
js_obfuscator.yar
Create js_obfuscator.yar
2015-09-07 12:57:48 +02:00
Kelihos.yar
New classification
2015-04-28 09:17:53 +02:00
KeyBoy.yar
Added KeyBoy rules
2015-05-06 23:50:29 +02:00
KINS.yar
New classification
2015-04-28 09:17:53 +02:00
kraken_bot1.yar
Create kraken_bot1.yar
2015-05-20 13:47:54 +02:00
Lenovo_superfish.yar
New classification
2015-04-28 09:17:53 +02:00
Leverage.yar
New classification
2015-04-28 09:17:53 +02:00
LinuxMoose.yar
Adding file per Issue #29
2015-05-26 20:04:13 +02:00
LogPOS.yar
New classification
2015-04-28 09:17:53 +02:00
LostDoor.yar
New classification
2015-04-28 09:17:53 +02:00
LuckyCat.yar
New classification
2015-04-28 09:17:53 +02:00
LURK0.yar
New classification
2015-04-28 09:17:53 +02:00
MacControl.yar
New classification
2015-04-28 09:17:53 +02:00
MalumPOS.yar
filename deleted var
2015-06-06 09:24:59 +02:00
Miancha.yar
Added W32/Miancha rule
2015-05-07 00:01:56 +02:00
Miscelanea_Linux.yar
mumblehard_packer duplicated rule
2015-06-01 23:25:00 +02:00
Miscelanea_RTF.yar
New classification
2015-04-28 09:17:53 +02:00
Miscelanea.yar
Removed duplicate rule UACElevator (already exist exploit_uac_elevators.yar)
2015-07-30 11:58:10 +02:00
mozart.yar
Create mozart.yar
2015-09-25 09:02:29 +02:00
Naikon.yar
Update Naikon.yar
2015-05-20 13:40:08 +02:00
naspyupdate.yar
New classification
2015-04-28 09:17:53 +02:00
NetTraveler.yar
Fix errors found by @ydklijnsma
2015-05-18 08:31:11 +02:00
netwiredRC.yar
New classification
2015-04-28 09:17:53 +02:00
Njrat.yar
New classification
2015-04-28 09:17:53 +02:00
Notepad.yar
New classification
2015-04-28 09:17:53 +02:00
NSFree.yar
New classification
2015-04-28 09:17:53 +02:00
Olyx.yar
New classification
2015-04-28 09:17:53 +02:00
OpClandestineWolf.yar
Changed directory
2015-06-24 09:57:44 +02:00
Opcleaver.yar
New classification
2015-04-28 09:17:53 +02:00
Operation_Potao.yar
Rename Operation_Potato.yar to Operation_Potao.yar
2015-08-05 10:02:06 +02:00
PAT_PassthehashToolkit.yar
Create PAT_PassthehashToolkit.yar
2015-07-16 14:41:27 +02:00
PlugX.yar
New classification
2015-04-28 09:17:53 +02:00
PoisonIvy.yar
Update PoisonIvy.yar
2015-05-27 10:41:31 +02:00
POS_bernhardPos.yar
Create POS_bernhardPos.yar
2015-07-20 13:26:38 +02:00
POS.yar
Rename POS to POS.yar
2015-05-26 13:18:42 +02:00
PubSab.yar
New classification
2015-04-28 09:17:53 +02:00
Quarian.yar
New classification
2015-04-28 09:17:53 +02:00
Ramsonware.yar
Raised the number of strings to match
2015-06-18 08:56:40 +02:00
RAT_Terminator.yar
New classification
2015-04-28 09:17:53 +02:00
RCS.yar
New classification
2015-04-28 09:17:53 +02:00
Regsubdat.yar
New classification
2015-04-28 09:17:53 +02:00
Rooter.yar
Fix errors found by @ydklijnsma
2015-05-18 08:31:11 +02:00
Safenet.yar
New classification
2015-04-28 09:17:53 +02:00
Sayad.yar
Sayad Infostealer
2015-05-26 18:32:00 +02:00
Scarhikn.yar
New classification
2015-04-28 09:17:53 +02:00
Scieron.yar
New classification
2015-04-28 09:17:53 +02:00
ShadowTech.yar
Update ShadowTech.yar
2015-05-27 13:04:23 +02:00
Shamoon.yar
New classification
2015-04-28 09:17:53 +02:00
Skeleton.yar
New classification
2015-04-28 09:17:53 +02:00
ssh_backdoor
Update ssh_backdoor
2015-05-20 13:50:02 +02:00
Stealer.yar
New classification
2015-04-28 09:17:53 +02:00
Surtr.yar
New classification
2015-04-28 09:17:53 +02:00
T5000.yar
New classification
2015-04-28 09:17:53 +02:00
tox.yar
Merging PR#33
2015-06-04 23:33:47 +02:00
Turla.yar
Added Turla reference
2015-05-26 18:08:59 +02:00
Urausy.yar
New classification
2015-04-28 09:17:53 +02:00
Vidgrab.yar
New classification
2015-04-28 09:17:53 +02:00
W32_NionSpy.yar
Rename W32_NionSpy to W32_NionSpy.yar
2015-05-26 13:19:03 +02:00
Wabot.yar
Create Wabot.yar
2015-08-24 08:15:47 +02:00
Warp.yar
New classification
2015-04-28 09:17:53 +02:00
Waterbug.yar
New classification
2015-04-28 09:17:53 +02:00
Webshell-shell.yar
New classification
2015-04-28 09:17:53 +02:00
Wimmie.yar
New classification
2015-04-28 09:17:53 +02:00
Win32_Buzus_Softpulse
Update Win32_Buzus_Softpulse
2015-05-20 13:49:43 +02:00
windigo-onimiki.yar
Create windigo-onimiki.yar
2015-06-01 08:50:43 +02:00
wineggdrop.yar
Adding new rules from pr/52
2015-09-09 20:38:39 +02:00
WoolenGoldfish.yar
New classification
2015-04-28 09:17:53 +02:00
XOR_DDosv1
Create XOR_DDosv1
2015-10-02 12:38:16 +02:00
xRAT20.yar
removed duplicate hash5 string
2015-09-20 03:10:11 -04:00
xRAT.yar
Create xRAT.yar
2015-05-25 09:31:10 +02:00
Xtreme.yar
New classification
2015-04-28 09:17:53 +02:00
YahLover.yar
New classification
2015-04-28 09:17:53 +02:00
Yayih.yar
New classification
2015-04-28 09:17:53 +02:00
Zegost.yar
New classification
2015-04-28 09:17:53 +02:00
Zeus.yar
New classification
2015-04-28 09:17:53 +02:00
ZoxPNG.yar
Added DownExecute_A
2015-05-26 18:55:13 +02:00