Detection rules
Every rule tracked across all seven sources, newest updates first.
| Source | Rule | Status | Updated |
|---|---|---|---|
| yara | GH_PM64 | — | — |
| yara | MemStub32_GH1 | — | — |
| yara | MemStub32 | — | — |
| yara | MemStub64_GH1 | — | — |
| yara | MemStub64 | — | — |
| yara | msvcrt_Win7AMD64 | — | — |
| yara | Greenbug_Malware_1 | — | — |
| yara | Greenbug_Malware_2 | — | — |
| yara | Greenbug_Malware_3 | — | — |
| yara | Greenbug_Malware_4 | — | — |
| yara | Greenbug_Malware_5 | — | — |
| yara | IMPLANT_1_v1 | — | — |
| yara | IMPLANT_1_v2 | — | — |
| yara | IMPLANT_1_v3 | — | — |
| yara | IMPLANT_1_v4 | — | — |
| yara | IMPLANT_1_v5 | — | — |
| yara | IMPLANT_1_v7 | — | — |
| yara | IMPLANT_2_v1 | — | — |
| yara | IMPLANT_2_v2 | — | — |
| yara | IMPLANT_2_v3 | — | — |
| yara | IMPLANT_2_v4 | — | — |
| yara | IMPLANT_2_v5 | — | — |
| yara | IMPLANT_2_v6 | — | — |
| yara | IMPLANT_2_v7 | — | — |
| yara | IMPLANT_2_v8 | — | — |
| yara | IMPLANT_2_v9 | — | — |
| yara | IMPLANT_2_v10 | — | — |
| yara | IMPLANT_2_v11 | — | — |
| yara | IMPLANT_2_v12 | — | — |
| yara | IMPLANT_2_v13 | — | — |
| yara | IMPLANT_2_v14 | — | — |
| yara | IMPLANT_2_v15 | — | — |
| yara | IMPLANT_2_v16 | — | — |
| yara | IMPLANT_2_v17 | — | — |
| yara | IMPLANT_2_v18 | — | — |
| yara | IMPLANT_2_v19 | — | — |
| yara | IMPLANT_4_v3_AlternativeRule | — | — |
| yara | IMPLANT_2_v20 | — | — |
| yara | IMPLANT_3_v1 | — | — |
| yara | IMPLANT_3_v2 | — | — |