ReversingLabs Yara

@ReversingLabsYara
3 followers8,019 downloads10 copies0 likes9,096 views

616 detections

This YARA rule detects the Mocket virus by matching specific byte sequences within the Portable Executable (PE) file. The rule checks for the standard PE magic number (MZ header) and then looks for three distinct byte patterns at the entry point and other locations within the executable. This indicates the presence of the Mocket malware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
0031
Yara rule that detects CVE-2020-0601 exploit.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
001
Yara rule that detects MultigrainPOS infostealer.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000
Yara rule that detects ProjectHookPOS infostealer.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000
Yara rule that detects KillDisk ransomware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
001
Yara rule that detects LuckyJoe ransomware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000
Yara rule that detects 5ss5c ransomware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000
Yara rule that detects ASN1Encoder ransomware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000
Yara rule that detects Afrodita ransomware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000
Yara rule that detects Ako ransomware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000
Page 50 of 62