ReversingLabs Yara
@ReversingLabsYara3 followers8,019 downloads10 copies0 likes9,096 views
616 detections
Filters
Last updated
All Time
Detection languages
616
Categories
614
418
80
63
18
Platforms
571
45
3
2
Products / Services
34
22
7
2
2
MITRE Techniques
410
399
196
178
140
CVEs
2
This YARA rule detects the RegretLocker ransomware by identifying specific byte sequences related to its file encryption routines, remote connection capabilities, and file discovery mechanisms. The rule looks for patterns across multiple parts of the malware's code, indicating its presence within a binary.
This YARA rule detects the Seth ransomware by identifying specific byte patterns associated with its file encryption routines, file discovery mechanisms, and remote connection capabilities. The rule looks for a combination of these patterns within a PE file (indicated by the MZ header).
Yara rule that detects RegretLocker ransomware.
Yara rule that detects Seth ransomware.
This rule detects the MountLocker ransomware based on specific byte patterns found within its executable code. The patterns are associated with functions responsible for encrypting files and finding files to encrypt, which are core functionalities of ransomware.
Yara rule that detects MountLocker ransomware.
This YARA rule detects the Knot ransomware by identifying specific byte patterns related to its file encryption routines, file discovery mechanisms, and remote connection capabilities. The rule looks for distinct sequences of bytes that are characteristic of how Knot ransomware encrypts files, finds target files on a system, and establishes remote connections, indicating the presence and activity of this specific malware.
This YARA rule detects the Zeoticus ransomware by identifying specific byte patterns related to its functionality. The rule looks for patterns associated with enumerating network shares, finding files, and encrypting files, which are core behaviors of ransomware. The rule requires all three sets of patterns to be present for a detection, reducing false positives.
Yara rule that detects Knot ransomware.
Yara rule that detects Zeoticus ransomware.
Page 28 of 62