Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	ShellCreator2	—	—
yara	obfuscated_eval	—	—
yara	RabbitStew32	—	—
yara	md5_d30b23d1224438518d18e90c218d7c8b	—	—
yara	onepage_or_checkout	—	—
yara	eval_base64_decode_a	—	—
yara	visbot	—	—
yara	cerber5b	—	—
yara	Surtr	—	—
yara	hidden_file_upload_in_503	—	—
yara	md5_fb9e35bf367a106d18eb6aa0fe406437	—	—
yara	Network_WinXPx86	—	—
yara	SmartCopy2	—	—
yara	RabbitStew64	—	—
yara	NetC	—	—
yara	remsec_executable_blob_64	—	—
yara	base64_hidden_in_image	—	—
yara	md5_24f2df1b9d49cfb02d8954b08dba471f	—	—
yara	md5_b579bff90970ec58862ea8c26014d643	—	—
yara	md5_fd141197c89d27b30821f3de8627ac38	—	—
yara	EquationGroup_Toolset_Apr17_yak	—	—
yara	EquationGroup_Toolset_Apr17_Esteemaudittouch_2_1_0	—	—
yara	EquationGroup_Toolset_Apr17_Educatedscholartouch_1_0_0	—	—
yara	EquationGroup_Toolset_Apr17_Smbtouch_1_1_1	—	—
yara	EquationGroup_Toolset_Apr17_Erraticgophertouch_1_0_1	—	—
yara	EquationGroup_Toolset_Apr17_AdUser_Implant	—	—
yara	EquationGroup_Toolset_Apr17_RemoteExecute_Implant	—	—
yara	EquationGroup_Toolset_Apr17_Doublepulsar_1_3_1	—	—
yara	EquationGroup_Toolset_Apr17_Englishmansdentist_1_2_0	—	—
yara	EquationGroup_Toolset_Apr17_Erraticgopher_1_0_1	—	—
yara	Mirai_2	—	—
yara	EquationGroup_Toolset_Apr17_Esteemaudit_2_1_0	—	—
yara	EquationGroup_Toolset_Apr17_Darkpulsar_1_1_0	—	—
yara	EquationGroup_Toolset_Apr17_Architouch_Eternalsynergy_Smbtouch	—	—
yara	EquationGroup_Toolset_Apr17_Educatedscholar_1_0_0	—	—
yara	EquationGroup_Toolset_Apr17_Eternalromance_2	—	—
yara	Gafgyt_Botnet_HIHI	—	—
yara	EquationGroup_Toolset_Apr17_Regread_1_1_1	—	—
yara	EquationGroup_Toolset_Apr17_Easybee_1_0_1	—	—
yara	EquationGroup_Toolset_Apr17_Namedpipetouch_2_0_0	—	—

← Prev Next →