Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	EquationGroup_Toolset_Apr17_renamer	—	—
yara	EquationGroup_Toolset_Apr17_PC_Exploit	—	—
yara	EquationGroup_Toolset_Apr17_PC_Level3_Gen	—	—
yara	EquationGroup_Toolset_Apr17_put_Implant9x	—	—
yara	EquationGroup_Toolset_Apr17_promiscdetect_safe	—	—
yara	md5_4b69af81b89ba444204680d506a8e0a1	—	—
yara	EquationGroup_Toolset_Apr17_PacketScan_Implant	—	—
yara	EquationGroup_Toolset_Apr17_SetPorts	—	—
yara	EquationGroup_Toolset_Apr17_GrDo_FileScanner_Implant	—	—
yara	EquationGroup_Toolset_Apr17_msgks_mskgu	—	—
yara	EquationGroup_Toolset_Apr17_Ifconfig_Target	—	—
yara	EquationGroup_Toolset_Apr17_DiBa_Target	—	—
yara	Batel_export_function	—	—
yara	EquationGroup_Toolset_Apr17_Dsz_Implant	—	—
yara	EquationGroup_Toolset_Apr17_GenKey	—	—
yara	EquationGroup_Toolset_Apr17_wmi_Implant	—	—
yara	EquationGroup_Toolset_Apr17_clocksvc	—	—
yara	EquationGroup_Toolset_Apr17_xxxRIDEAREA	—	—
yara	EquationGroup_Toolset_Apr17_yak_min_install	—	—
yara	success_fail_codes_fallchill	—	—
yara	EquationGroup_Toolset_Apr17_SetOurAddr	—	—
yara	EquationGroup_Toolset_Apr17_GetAdmin_LSADUMP_ModifyPrivilege_Implant	—	—
yara	EquationGroup_Toolset_Apr17_SendPKTrigger	—	—
yara	EquationGroup_Toolset_Apr17_DmGz_Target_2	—	—
yara	EquationGroup_Toolset_Apr17_mstcp32_DXGHLP16_tdip	—	—
yara	EquationGroup_Toolset_Apr17_regprobe	—	—
yara	almashreq_agent_dotnet	—	—
yara	alina	—	—
yara	andromeda	—	—
yara	Worm_Gamarue	—	—
yara	andromeda_bot	—	—
yara	Arkei	—	—
yara	AthenaHTTP	—	—
yara	AthenaIRC	—	—
yara	Atmos_Malware	—	—
yara	Atmos_Packed_Malware	—	—
yara	Atmos_Builder	—	—
yara	custom_ssh_backdoor_server	—	—
yara	BlackRev	—	—
yara	BlackWorm	—	—

← Prev Next →