ReversingLabs Yara
@ReversingLabsYara3 followers8,019 downloads10 copies0 likes9,096 views
616 detections
Filters
Last updated
All Time
Detection languages
616
Categories
614
418
80
63
18
Platforms
571
45
3
2
Products / Services
34
22
7
2
2
MITRE Techniques
410
399
196
178
140
CVEs
2
Yara rule that detects ZeroLocker ransomware.
Yara rule that detects CobraLocker ransomware.
This rule detects the Networm ransomware by identifying specific byte patterns associated with its file encryption routines, remote connection capabilities, and file discovery mechanisms. The rule looks for a combination of these patterns within executable files, indicating the presence of the ransomware.
This rule detects the WhiteBlackCrypt ransomware by identifying specific byte patterns associated with its file finding, file encryption, and service registration functionalities. The rule looks for a combination of these patterns within a PE file, indicated by the 'MZ' header.
Yara rule that detects Networm ransomware.
Yara rule that detects WhiteBlackCrypt ransomware.
This YARA rule detects the Henry ransomware by identifying specific byte sequences related to its core functionalities. These functionalities include finding files for encryption, performing the encryption process, setting up its operational environment, and initializing its components. The rule requires all four sets of byte patterns to be present in a file, along with the MZ header, to minimize false positives.
This YARA rule detects the HowAreYou ransomware based on specific byte patterns associated with its remote connection capabilities, file discovery mechanisms, and file encryption routines. The rule looks for distinct sequences of bytes that are characteristic of the malware's code for establishing remote connections, enumerating files on the system, and performing encryption of those files.
Yara rule that detects Henry ransomware.
Yara rule that detects HowAreYou ransomware.
Page 25 of 62