ReversingLabs Yara
@ReversingLabsYara3 followers8,019 downloads10 copies0 likes9,096 views
616 detections
Filters
Last updated
All Time
Detection languages
616
Categories
614
418
80
63
18
Platforms
571
45
3
2
Products / Services
34
22
7
2
2
MITRE Techniques
410
399
196
178
140
CVEs
2
Yara rule that detects ChupaCabra ransomware.
Yara rule that detects Hog ransomware.
This rule detects the McBurglar ransomware by identifying specific bytecode patterns related to its setup, file enumeration, salt generation for encryption, and file encryption routines. The rule looks for distinct sequences of MSIL (Microsoft Intermediate Language) instructions that are characteristic of McBurglar's operations.
This rule detects the presence of TargetCompany ransomware by identifying specific byte patterns associated with its core functionalities. These functionalities include encrypting files, generating encryption keys, finding files to encrypt, and establishing remote connections, which are all characteristic behaviors of ransomware.
Yara rule that detects McBurglar ransomware.
Yara rule that detects TargetCompany ransomware.
This YARA rule detects the Bam2021 ransomware by identifying specific byte patterns associated with its core functionalities. These functionalities include enumerating shares, finding files for encryption, generating encryption keys, performing file encryption, and establishing remote connections, likely for command and control or data exfiltration.
This YARA rule detects the Motocos ransomware by identifying specific byte patterns associated with its key generation, file finding, and file encryption routines. The rule looks for three distinct sequences of bytes, indicating the presence of the ransomware's core functionalities within a Windows executable.
Yara rule that detects Bam2021 ransomware.
Yara rule that detects Motocos ransomware.
Page 21 of 62