admin/Yara-Rules-rules
1
0
Fork 0
mirror of https://github.com/Yara-Rules/rules synced 2026-06-08 12:58:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
a2bf7b60c2d1bc1d34531d33f191f34773cbdb95
Yara-Rules-rules/malware
T
History
mmorenog a2bf7b60c2 Create APT_Win_Pipcreat.yar
2016-06-09 09:52:55 +02:00
..
Operation_Blockbuster
Rename RomeoFoxtrot_mod.yara to RomeoFoxtrot_mod.yara.error
2016-02-26 11:12:51 +01:00
Adwind_JAR_PACKA.yar
Tags
2016-02-26 22:13:44 +01:00
Adwind_JAR_PACKB.yar
Update Adwind_JAR_PACKB.yar
2016-02-09 12:53:55 +01:00
Adzok_RAT.yar
Tags
2016-02-26 22:13:44 +01:00
Alina.yar
Update Alina.yar
2016-03-01 11:58:39 +01:00
Andromeda.yar
Tags
2016-02-26 22:13:44 +01:00
Anthem_DeepPanda.yar
Added tags
2016-02-26 22:25:55 +01:00
APT1.yar
Fixed the APT1_aspnetreport and APT1_dbg_mess
2015-09-21 11:13:41 -04:00
APT3102.yar
New classification
2015-04-28 09:17:53 +02:00
APT9002.yar
Add FE_APT_9002 from nyx0 PR
2015-05-04 16:50:35 +02:00
APT_alienspy_RAT.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_APT17.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_backspace.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_Bestia.yar
Update and rename APT_bestia.yar to APT_Bestia.yar
2016-03-01 11:25:57 +01:00
APT_Blackenergy.yar
Update and rename BlackEnergy.yar to APT_Blackenergy.yar
2016-01-08 09:43:15 +01:00
APT_bluetermite_emdivi.yar
Fix duplicate identifiers in the rules
2016-02-10 20:57:33 -05:00
APT_c16.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_Carbanak2.yar
Create APT_Carbanak2.yar
2015-09-07 13:00:56 +02:00
APT_Careto.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_CheshireCat.yar
Create APT_CheshireCat.yar
2015-08-10 08:26:02 +02:00
APT_Cloudduke.yar
We delete Acrotray_Anomaly
2015-10-20 16:26:46 +02:00
APT_Codoso.yar
Create APT_Codoso.yar
2016-02-01 08:30:58 +01:00
APT_CVE2015_5119.yar
Create APT_CVE2015_5119.yar
2015-08-13 12:45:42 +02:00
APT_Danti_svcmondr.yar
Update APT_Danti_svcmondr.yar
2016-05-26 12:51:27 +02:00
APT_DeputyDog_Fexel.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_Derusbi.yar
Update APT_Derusbi.yar
2016-03-01 11:33:44 +01:00
APT_Duqu2.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_Emissary.yar
Create APT_Emissary.yar
2016-01-08 09:44:51 +01:00
APT_HackingTeam.yar
Update APT_HackingTeam.yar
2015-07-20 13:27:39 +02:00
APT_Hellsing.yar
Minor changes in metas.
2015-06-29 18:29:49 +02:00
APT_Hikit.yar
New classification
2015-04-28 09:17:53 +02:00
APT_Hizor_RAT.yar
Update APT_Hizor_RAT.yar
2016-04-05 09:54:19 +02:00
APT_indetectables_RAT.yar
Fix duplicate identifiers in the rules
2016-02-10 20:57:33 -05:00
APT_Irontiger_Trendmicro.yar
Create APT_Irontiger_Trendmicro.yar
2015-09-18 10:04:34 +02:00
APT_irontiger.yar
change file extensions to .yar
2015-12-15 21:28:12 +01:00
APT_Kaba.yar
New classification
2015-04-28 09:17:53 +02:00
APT_korplug_fast.yar
Create APT_korplug_fast.yar
2015-08-24 08:08:53 +02:00
APT_Laudanum_Webshells.yar
Create APT_Laudanum_Webshells.yar
2015-06-24 13:23:49 +02:00
APT_LotusBlossom.yar
Create APT_LotusBlossom.yar
2015-06-23 13:23:38 +02:00
APT_Minidionis.yar
Create APT_Minidionis.yar
2015-07-28 09:02:03 +02:00
APT_Mirage.yar
Added mirage rule
2015-05-07 00:07:23 +02:00
APT_Molerats.yar
Addedd op molerats
2015-05-26 18:15:53 +02:00
APT_Mongall.yar
New classification
2015-04-28 09:17:53 +02:00
APT_NGO_wuaclt.yar
New classification
2015-04-28 09:17:53 +02:00
APT_OLE_JSRat.yar
newline at end of file
2015-06-25 09:34:17 +02:00
APT_OPCleaver.yar
New classification
2015-04-28 09:17:53 +02:00
APT_passthehashtoolkit.yar
Create APT_passthehashtoolkit.yar
2015-07-28 09:03:22 +02:00
APT_pcclient.yar
New classification
2015-04-28 09:17:53 +02:00
APT_Platinum.yar
Update APT_Platinum.yar
2016-05-21 15:25:50 +02:00
APT_Poseidon_Group.yar
Create APT_Poseidon_Group.yar
2016-02-10 08:53:47 +01:00
APT_Prikormka.yar
Update APT_Prikormka.yar
2016-05-18 15:42:03 +02:00
APT_putterpanda.yar
Create APT_putterpanda.yar
2015-06-17 10:19:54 +02:00
APT_quarkspwdump.yar
Create APT_quarkspwdump.yar
2015-10-05 09:15:16 +02:00
APT_Regin.yar
Copied warning about false positives from Loki's repository
2015-05-20 16:09:06 +02:00
APT_Ruag.yar
Create APT_Ruag.yar
2016-05-24 19:16:18 +02:00
APT_Seaduke_Unit42.yar
Create APT_Seaduke_Unit42.yar
2015-07-16 14:42:14 +02:00
APT_Sofacy_Fysbis.yar
Create APT_Sofacy_Fysbis.yar
2016-02-15 08:30:38 +01:00
APT_Sofacy_xtunnel_bundestag.yar
Create APT_Sofacy_xtunnel_bundestag.yar
2015-06-24 13:25:02 +02:00
APT_Sphinx_Moth.yar
Create APT_Sphinx_Moth.yar
2015-12-18 08:56:49 +01:00
APT_Terracota_Liudoor.yar
Create APT_Terracota_Liudoor.yar
2015-08-05 08:42:59 +02:00
APT_Terracota.yar
Create APT_Terracota.yar
2015-08-05 08:46:49 +02:00
APT_threatgroup_3390.yar
Update APT_threatgroup_3390.yar
2015-08-24 08:25:48 +02:00
APT_TidePool.yar
Create APT_TidePool.yar
2016-05-26 12:50:05 +02:00
APT_unit78020_malware.yar
Create APT_unit78020_malware.yar
2015-09-25 08:43:47 +02:00
APT_UP007_SLServer.yar
Create APT_UP007_SLServer.yar
2016-04-19 10:50:06 +02:00
APT_WildNeutron.yar
Create APT_WildNeutron.yar
2015-07-16 14:43:35 +02:00
APT_win32_dll_bergard_pgv_pvid_variant.yar
Update and rename apt_win32_dll_bergard_pgv_pvid_variant to APT_win32_dll_bergard_pgv_pvid_variant.yar
2016-05-06 14:25:41 +02:00
APT_win32_dll_rat_hiZorRAT.yar
Create APT_win32_dll_rat_hiZorRAT.yar
2016-04-01 11:44:08 +02:00
APT_Win_Pipcreat.yar
Create APT_Win_Pipcreat.yar
2016-06-09 09:52:55 +02:00
APT_Winnti.yar
Create APT_Winnti.yar
2015-10-13 10:10:50 +02:00
Athena.yar
Added some rulesets from https://github.com/arbor/yara
2016-05-18 17:23:16 +02:00
Babar.yar
New classification
2015-04-28 09:17:53 +02:00
Backdoor_WinntiPharma.yar
Create Backdoor_WinntiPharma.yar
2015-06-23 13:25:58 +02:00
backoff.yar
Create backoff.yar
2015-11-26 09:09:30 +01:00
Bangat.yar
New classification
2015-04-28 09:17:53 +02:00
BlackRev.yar
Added some rulesets from https://github.com/arbor/yara
2016-05-18 17:23:16 +02:00
BlackShades.yar
Update BlackShades.yar
2015-05-25 09:34:36 +02:00
BlackWorm.yar
Create BlackWorm.yar
2015-11-26 09:11:11 +01:00
Bolonyokte.yar
New classification
2015-04-28 09:17:53 +02:00
Boouset.yar
New classification
2015-04-28 09:17:53 +02:00
Bozok.yar
Create Bozok.yar
2015-11-26 09:12:21 +01:00
Bublik_downloader.yar
New classification
2015-04-28 09:17:53 +02:00
CAP_HookExKeylogger.yar
Create CAP_HookExKeylogger.yar
2016-01-18 09:41:33 +01:00
CAP_Win32Inet.yara
Create CAP_Win32Inet.yara
2016-01-18 09:43:19 +01:00
Casper.yar
New classification
2015-04-28 09:17:53 +02:00
Cerberus.yar
New classification
2015-04-28 09:17:53 +02:00
Chicken.yar
Added some rulesets from https://github.com/arbor/yara
2016-05-18 17:23:16 +02:00
Citadel.yar
Update Citadel.yar
2015-05-26 13:18:29 +02:00
Cookies.yar
New classification
2015-04-28 09:17:53 +02:00
CorkowDLL.yar
Update and rename CorkowDLL to CorkowDLL.yar
2016-02-09 12:41:10 +01:00
Crime_Fareit.yar
Create Crime_Fareit.yar
2015-10-20 18:01:53 +02:00
CRIME_Shifu_trojan.yar
Quotes error
2016-01-19 18:49:50 +01:00
crime_upatre_oct15.yar
Create crime_upatre_oct15.yar
2015-10-14 15:09:13 +02:00
Crimson_RAT.yar
Rename Crimson_RAT to Crimson_RAT.yar
2015-05-25 09:50:49 +02:00
Crypren_ransomware
Create Crypren_ransomware
2016-05-12 22:06:28 +02:00
Crypren_ransomware.yar
rename Crypren_ransomware file.
2016-05-13 18:20:52 +02:00
cxpid.yar
New classification
2015-04-28 09:17:53 +02:00
CyberGate.yar
Create CyberGate.yar
2015-11-26 09:13:09 +01:00
Cythosia.yar
Create Cythosia.yar
2015-11-26 09:13:52 +01:00
DarkComet.yar
Update DarkComet.yar
2015-11-26 09:32:23 +01:00
DDoSTf.yar
Create DDoSTf.yar
2016-01-13 15:33:59 +01:00
Derkziel_Stealer.yar
Update and rename derkziel_stealer to malware/Derkziel_Stealer.yar
2016-01-13 15:26:04 +01:00
Dexter.yar
Update Dexter.yar
2015-11-26 09:17:30 +01:00
DiamondFox.yar
Create DiamondFox.yar
2015-11-26 09:18:16 +01:00
DirtJumper.yar
Added some rulesets from https://github.com/arbor/yara
2016-05-18 17:23:16 +02:00
DRIDEX_phish_gina_dec15.yar
Create DRIDEX_phish_gina_dec15.yar
2015-12-03 08:40:03 +01:00
Dridex.yar
New classification
2015-04-28 09:17:53 +02:00
dubrute.yar
Adding new rules from pr/52
2015-09-09 20:38:39 +02:00
ELF_Linux_Torte.yar
Update ELF_Linux_Torte.yar
2016-02-09 17:15:13 +01:00
Enfal.yar
Update Enfal.yar
2015-05-26 12:40:07 +02:00
Equation.yar
Update Equation.yar
2015-10-05 09:19:57 +02:00
EXPERIMENTAL_Beef_Hooked.yar
Rename Beef_Hooked.yar to EXPERIMENTAL_Beef_Hooked.yar
2015-12-18 09:09:22 +01:00
EXPERIMENTAL_Beef_pretty_theft.yar
Rename Beef_pretty_theft.yar to EXPERIMENTAL_Beef_pretty_theft.yar
2015-12-18 09:09:48 +01:00
exploit_cve_2015_1701.yar
Create exploit_cve_2015_1701.yar
2015-05-20 13:52:27 +02:00
Exploit_CVE_2015_2426.yar
Create Exploit_CVE_2015_2426.yar
2015-07-22 11:06:36 +02:00
exploit_uac_elevators.yar
Create exploit_uac_elevators.yar
2015-06-17 10:25:19 +02:00
Ezcob.yar
New classification
2015-04-28 09:17:53 +02:00
F0xy.yar
New classification
2015-04-28 09:17:53 +02:00
FakeM.yar
Update FakeM.yar
2016-02-01 08:35:29 +01:00
FastPOS.yar
Update and rename FastPOS to FastPOS.yar
2016-06-06 10:56:13 +02:00
favorite.yar
New classification
2015-04-28 09:17:53 +02:00
FinSpy.yar
New classification
2015-04-28 09:17:53 +02:00
FiveEyes.yar
New classification
2015-04-28 09:17:53 +02:00
FlyingKitten.yar
Added flying kitten rules
2015-05-06 23:15:19 +02:00
Gamarue.yar
Create Gamarue.yar
2016-02-26 10:45:52 +01:00
Gen_powerkatz.yar
Create Gen_powerkatz.yar
2016-02-08 09:18:48 +01:00
general_cloaking.yar
Update general_cloaking.yar
2016-01-19 08:56:33 +01:00
generic_exe2hex_payload.yar
Create generic_exe2hex_payload.yar
2016-01-18 09:03:12 +01:00
Genome.yar
Create Genome.yar
2015-11-26 09:23:52 +01:00
Gh0st.yar
New classification
2015-04-28 09:17:53 +02:00
Gholee.yar
Update Gholee.yar
2015-05-04 13:47:59 +02:00
Glasses.yar
New classification
2015-04-28 09:17:53 +02:00
GlassRAT.yar
Update GlassRAT.yar - Syntax error
2015-11-26 22:09:38 +01:00
Gozi_Family.yar
Update Gozi_Family.yar
2016-02-11 09:16:33 +01:00
Grozlex.yar
New classification
2015-04-28 09:17:53 +02:00
Havex_Memdump.yar
Create Havex_Memdump.yar
2016-01-04 23:08:57 +01:00
Havex.yar
Update Havex.yar
2016-01-19 08:43:41 +01:00
Hsdfihdf_banking_malware.yar
Update and rename Hsdfihdf.yar to Hsdfihdf_banking_malware.yar
2016-03-01 11:28:42 +01:00
iexpl0ree.yar
New classification
2015-04-28 09:17:53 +02:00
IMuler.yar
New classification
2015-04-28 09:17:53 +02:00
inocnation.yar
Update inocnation.yar
2015-12-18 08:48:46 +01:00
Install11.yar
New classification
2015-04-28 09:17:53 +02:00
Intel_Virtualization.yar
New classification
2015-04-28 09:17:53 +02:00
jRAT.yar
New classification
2015-04-28 09:17:53 +02:00
js_obfuscator.yar
Create js_obfuscator.yar
2015-09-07 12:57:48 +02:00
Kelihos.yar
New classification
2015-04-28 09:17:53 +02:00
KeyBoy.yar
Added KeyBoy rules
2015-05-06 23:50:29 +02:00
KINS.yar
New classification
2015-04-28 09:17:53 +02:00
kraken_bot1.yar
Create kraken_bot1.yar
2015-05-20 13:47:54 +02:00
Lenovo_superfish.yar
New classification
2015-04-28 09:17:53 +02:00
Leverage.yar
New classification
2015-04-28 09:17:53 +02:00
LinuxMoose.yar
Adding file per Issue #29
2015-05-26 20:04:13 +02:00
LostDoor.yar
New classification
2015-04-28 09:17:53 +02:00
LuckyCat.yar
New classification
2015-04-28 09:17:53 +02:00
LURK0.yar
New classification
2015-04-28 09:17:53 +02:00
MacControl.yar
New classification
2015-04-28 09:17:53 +02:00
Madness.yar
Added some rulesets from https://github.com/arbor/yara
2016-05-18 17:23:16 +02:00
Mailers.yar
Create Mailers.yar
2015-12-25 19:44:11 +01:00
Meterpreter_Reverse_Tcp.yar
Create Meterpreter_Reverse_Tcp.yar
2016-06-09 09:45:58 +02:00
Miancha.yar
Added W32/Miancha rule
2015-05-07 00:01:56 +02:00
Miscelanea_Linux.yar
Update Miscelanea_Linux.yar
2016-02-04 12:07:48 +01:00
Miscelanea_RTF.yar
New classification
2015-04-28 09:17:53 +02:00
Miscelanea.yar
Fix duplicate identifiers in the rules
2016-02-10 20:57:33 -05:00
mozart.yar
Create mozart.yar
2015-09-25 09:02:29 +02:00
MW_elknot_xor.yar
Create MW_elknot_xor.yar
2016-05-04 10:57:50 +02:00
Naikon.yar
Update Naikon.yar
2015-05-20 13:40:08 +02:00
naspyupdate.yar
New classification
2015-04-28 09:17:53 +02:00
NetTraveler.yar
Fix errors found by @ydklijnsma
2015-05-18 08:31:11 +02:00
netwiredRC.yar
New classification
2015-04-28 09:17:53 +02:00
Njrat.yar
Update Njrat.yar
2015-11-26 09:28:21 +01:00
Notepad.yar
New classification
2015-04-28 09:17:53 +02:00
NSFree.yar
New classification
2015-04-28 09:17:53 +02:00
Olyx.yar
New classification
2015-04-28 09:17:53 +02:00
OpClandestineWolf.yar
Update OpClandestineWolf.yar
2015-10-28 14:53:42 +08:00
Opcleaver.yar
New classification
2015-04-28 09:17:53 +02:00
Operation_Dust_storm.yar
Update Operation_Dust_storm.yar
2016-02-27 00:04:06 +01:00
Operation_Potao.yar
Rename Operation_Potato.yar to Operation_Potao.yar
2015-08-05 10:02:06 +02:00
PE_File_pyinstaller.yar
Create PE_File_pyinstaller.yar
2016-06-09 09:35:13 +02:00
PlugX.yar
New classification
2015-04-28 09:17:53 +02:00
PoisonIvy.yar
Update PoisonIvy.yar
2015-11-26 09:50:27 +01:00
ponmocup_plugin_memory.yar
Fixed meta errors
2015-12-02 18:19:22 +01:00
Pony.yar
Create Pony.yar
2015-11-26 09:35:13 +01:00
POS_bernhardPos.yar
Create POS_bernhardPos.yar
2015-07-20 13:26:38 +02:00
POS_Easterjack.yar
Create POS_Easterjack.yar
2015-11-26 09:19:40 +01:00
POS_LogPOS.yar
Rename LogPOS.yar to POS_LogPOS.yar
2015-11-26 09:20:45 +01:00
POS_MalumPOS.yar
Rename MalumPOS.yar to POS_MalumPOS.yar
2015-11-26 09:20:59 +01:00
POS.yar
Rename POS to POS.yar
2015-05-26 13:18:42 +02:00
PubSab.yar
New classification
2015-04-28 09:17:53 +02:00
pyinstaller.yar
add pyinstaller rule
2016-05-16 08:28:00 +02:00
Quarian.yar
New classification
2015-04-28 09:17:53 +02:00
Ransom_TeslaCrypt.yar
Create Ransom_TeslaCrypt.yar
2016-04-05 09:41:25 +02:00
Ransomware_Locky.yar
Create Ransomware_Locky.yar
2016-02-23 18:07:49 +01:00
Ransomware_Petya.yar
Create Ransomware_Petya.yar
2016-04-07 11:10:58 +02:00
Ransomware.yar
Rename Ramsonware.yar to Ransomware.yar
2015-10-27 16:26:27 +02:00
RAT_Sakula.yar
Create RAT_Sakula.yar
2015-11-11 13:42:21 +01:00
RAT_Terminator.yar
New classification
2015-04-28 09:17:53 +02:00
RCS.yar
New classification
2015-04-28 09:17:53 +02:00
Regsubdat.yar
New classification
2015-04-28 09:17:53 +02:00
Retefe.yar
Retefe.yar
2016-05-16 11:26:41 +02:00
Rockloader.yar
Create Rockloader.yar
2016-04-19 10:58:53 +02:00
Rooter.yar
Fix errors found by @ydklijnsma
2015-05-18 08:31:11 +02:00
rovnix_downloader_sinkhole_check.yar
Update rovnix to replace M$ word quotes with ASCII quotation marks
2016-01-06 12:25:04 -05:00
Safenet.yar
New classification
2015-04-28 09:17:53 +02:00
Sayad.yar
Sayad Infostealer
2015-05-26 18:32:00 +02:00
Scarhikn.yar
New classification
2015-04-28 09:17:53 +02:00
Scieron.yar
New classification
2015-04-28 09:17:53 +02:00
ShadowTech.yar
Update ShadowTech.yar
2015-05-27 13:04:23 +02:00
Shamoon.yar
New classification
2015-04-28 09:17:53 +02:00
Skeleton.yar
New classification
2015-04-28 09:17:53 +02:00
sqlite.yar
Update sqlite.yar
2016-01-19 08:43:00 +01:00
ssh_backdoor.yar
change file extensions to .yar
2015-12-15 21:28:12 +01:00
Stealer.yar
New classification
2015-04-28 09:17:53 +02:00
Surtr.yar
New classification
2015-04-28 09:17:53 +02:00
T5000.yar
New classification
2015-04-28 09:17:53 +02:00
tedroo.yar
Update tedroo.yar
2015-11-24 09:29:56 +01:00
THOR_HackTools.yar
Removed duplicates
2016-01-28 08:57:50 +01:00
THOR_Webshells.yar
Removed duplicates
2016-01-28 08:57:50 +01:00
Tinba_Banking_Trojan.yar
Create Tinba_Banking_Trojan.yar
2016-01-18 09:45:03 +01:00
tox.yar
Merging PR#33
2015-06-04 23:33:47 +02:00
TreasureHunt.yar
Update TreasureHunt.yar
2016-05-19 17:17:30 +02:00
Trojan_Elex.yar
Create Trojan_Elex.yar
2016-02-11 08:45:35 +01:00
Trojan_Ponmocup.yar
Create Trojan_Ponmocup.yar
2016-02-26 10:50:09 +01:00
Turla.yar
Added Turla reference
2015-05-26 18:08:59 +02:00
Urausy.yar
New classification
2015-04-28 09:17:53 +02:00
Vidgrab.yar
New classification
2015-04-28 09:17:53 +02:00
W32_NionSpy.yar
Rename W32_NionSpy to W32_NionSpy.yar
2015-05-26 13:19:03 +02:00
Wabot.yar
Create Wabot.yar
2015-08-24 08:15:47 +02:00
Warp.yar
New classification
2015-04-28 09:17:53 +02:00
Waterbug.yar
New classification
2015-04-28 09:17:53 +02:00
Wimmie.yar
New classification
2015-04-28 09:17:53 +02:00
Win32_Buzus_Softpulse.yar
change file extensions to .yar
2015-12-15 21:28:12 +01:00
windigo-onimiki.yar
Create windigo-onimiki.yar
2015-06-01 08:50:43 +02:00
wineggdrop.yar
Adding new rules from pr/52
2015-09-09 20:38:39 +02:00
WoolenGoldfish.yar
New classification
2015-04-28 09:17:53 +02:00
XOR_DDosv1.yar
Update XOR_DDosv1.yar
2016-01-13 15:32:48 +01:00
xRAT20.yar
removed duplicate hash5 string
2015-09-20 03:10:11 -04:00
xRAT.yar
Create xRAT.yar
2015-05-25 09:31:10 +02:00
Xtreme.yar
New classification
2015-04-28 09:17:53 +02:00
Yayih.yar
New classification
2015-04-28 09:17:53 +02:00
Zegost.yar
New classification
2015-04-28 09:17:53 +02:00
Zeus.yar
New classification
2015-04-28 09:17:53 +02:00
ZoxPNG.yar
Added DownExecute_A
2015-05-26 18:55:13 +02:00