Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	HTMLVariant	—	—
yara	md5_f797dd5d8e13fe5c8898dbe3beb3cc5b	—	—
yara	FakeM_Generic	—	—
yara	ccrewDownloader3	—	—
yara	ccrewQAZ	—	—
yara	base64_hidden_in_image	—	—
yara	metaxcd	—	—
yara	md5_24f2df1b9d49cfb02d8954b08dba471f	—	—
yara	md5_ab63230ee24a988a4a9245c2456e4874	—	—
yara	MiniASP	—	—
yara	DownloaderPossibleCCrew	—	—
yara	APT1_MAPIGET	—	—
yara	APT1_LIGHTBOLT	—	—
yara	sinlesspleasure_com	—	—
yara	obfuscated_eval	—	—
yara	amasty_biz	—	—
yara	amasty_biz_js	—	—
yara	mag_php_js	—	—
yara	thetech_org_js	—	—
yara	md5_cdn_js_link_js	—	—
yara	fromCharCode_in_unicode	—	—
yara	indoexploit_autoexploiter	—	—
yara	function_through_object	—	—
yara	APT1_GETMAIL	—	—
yara	hex_script	—	—
yara	php_malfunctions	—	—
yara	APT1_GDOCUPLOAD	—	—
yara	remsec_encrypted_api	—	—
yara	SmartCopy2	—	—
yara	php_obf_malfunctions	—	—
yara	fopo_obfuscator	—	—
yara	APT1_WEBC2_Y21K	—	—
yara	APT1_WEBC2_YAHOO	—	—
yara	Vbr	—	—
yara	r4_wiper_2	—	—
yara	APT_Hikit_msrv	—	—
yara	obf_base64_decode	—	—
yara	ccrewDownloader1	—	—
yara	Surtr	—	—
yara	md5_fb9e35bf367a106d18eb6aa0fe406437	—	—