Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4 detections
Filters
Last updated
All Time
Detection languages
4
Contributors
2
2
Categories
4
2
Platforms
4
MITRE Techniques
18,116
15,638
12,585
8,395
6,225
Strings based rule for burntcigar malware
Regex based Rule for burntcigar malware
This rule detects the Cuba ransomware based on specific byte patterns found within the executable. The patterns are associated with functions for enumerating resources, finding files, and encrypting files, which are characteristic behaviors of ransomware.
Yara rule that detects Cuba ransomware.