Skip to content

R
rules
Commit 306feaef by Jaume Martin
Options

Moved Crypto/base64.yar to utils/base64.yar according to #239 and regenerated the index

parent 2f35228c
Showing with 24 additions and 15 deletions
Antidebug_AntiVM_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Antidebug_AntiVM/antidebug_antivm.yar" include "./Antidebug_AntiVM/antidebug_antivm.yar"
CVE_Rules_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./CVE_Rules/CVE-2010-0805.yar" include "./CVE_Rules/CVE-2010-0805.yar"
include "./CVE_Rules/CVE-2010-0887.yar" include "./CVE_Rules/CVE-2010-0887.yar"
......
Crypto_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Crypto/base64.yar"
include "./Crypto/crypto_signatures.yar" include "./Crypto/crypto_signatures.yar"
Exploit-Kits_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Exploit-Kits/EK_Angler.yar" include "./Exploit-Kits/EK_Angler.yar"
include "./Exploit-Kits/EK_Blackhole.yar" include "./Exploit-Kits/EK_Blackhole.yar"
......
Malicious_Documents_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar" include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar"
include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar" include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar"
......
Mobile_Malware_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Mobile_Malware/Android_adware.yar" include "./Mobile_Malware/Android_adware.yar"
include "./Mobile_Malware/Android_AliPay_smsStealer.yar" include "./Mobile_Malware/Android_AliPay_smsStealer.yar"
......
Packers_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Packers/Javascript_exploit_and_obfuscation.yar" include "./Packers/Javascript_exploit_and_obfuscation.yar"
include "./Packers/JJencode.yar" include "./Packers/JJencode.yar"
......
Webshells_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Webshells/WShell_APT_Laudanum.yar" include "./Webshells/WShell_APT_Laudanum.yar"
include "./Webshells/Wshell_ChineseSpam.yar" include "./Webshells/Wshell_ChineseSpam.yar"
......
email_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./email/attachment.yar" include "./email/attachment.yar"
include "./email/bank_rule.yar" include "./email/bank_rule.yar"
......
index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Antidebug_AntiVM/antidebug_antivm.yar" include "./Antidebug_AntiVM/antidebug_antivm.yar"
include "./Crypto/base64.yar"
include "./Crypto/crypto_signatures.yar" include "./Crypto/crypto_signatures.yar"
include "./CVE_Rules/CVE-2010-0805.yar" include "./CVE_Rules/CVE-2010-0805.yar"
include "./CVE_Rules/CVE-2010-0887.yar" include "./CVE_Rules/CVE-2010-0887.yar"
...@@ -74,6 +73,7 @@ include "./malware/APT_eqgrp_apr17.yar" ...@@ -74,6 +73,7 @@ include "./malware/APT_eqgrp_apr17.yar"
include "./malware/APT_Equation.yar" include "./malware/APT_Equation.yar"
include "./malware/APT_EQUATIONGRP.yar" include "./malware/APT_EQUATIONGRP.yar"
include "./malware/APT_fancybear_dnc.yar" include "./malware/APT_fancybear_dnc.yar"
include "./malware/APT_fancybear_downdelph.yar"
include "./malware/APT_FiveEyes.yar" include "./malware/APT_FiveEyes.yar"
include "./malware/APT_furtim.yar" include "./malware/APT_furtim.yar"
include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar" include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar"
...@@ -191,6 +191,7 @@ include "./malware/MALW_Lateral_Movement.yar" ...@@ -191,6 +191,7 @@ include "./malware/MALW_Lateral_Movement.yar"
include "./malware/MALW_Lenovo_Superfish.yar" include "./malware/MALW_Lenovo_Superfish.yar"
include "./malware/MALW_LinuxMoose.yar" include "./malware/MALW_LinuxMoose.yar"
include "./malware/MALW_LostDoor.yar" include "./malware/MALW_LostDoor.yar"
include "./malware/MALW_LuaBot.yar"
include "./malware/MALW_LuckyCat.yar" include "./malware/MALW_LuckyCat.yar"
include "./malware/MALW_LURK0.yar" include "./malware/MALW_LURK0.yar"
include "./malware/MALW_MacControl.yar" include "./malware/MALW_MacControl.yar"
...@@ -313,9 +314,11 @@ include "./malware/RANSOM_Comodosec.yar" ...@@ -313,9 +314,11 @@ include "./malware/RANSOM_Comodosec.yar"
include "./malware/RANSOM_Crypren.yar" include "./malware/RANSOM_Crypren.yar"
include "./malware/RANSOM_Cryptolocker.yar" include "./malware/RANSOM_Cryptolocker.yar"
include "./malware/RANSOM_DMALocker.yar" include "./malware/RANSOM_DMALocker.yar"
include "./malware/RANSOM_Erebus.yar"
include "./malware/RANSOM_GoldenEye.yar" include "./malware/RANSOM_GoldenEye.yar"
include "./malware/RANSOM_Locky.yar" include "./malware/RANSOM_Locky.yar"
include "./malware/RANSOM_MS17-010_Wannacrypt.yar" include "./malware/RANSOM_MS17-010_Wannacrypt.yar"
include "./malware/RANSOM_PetrWrap.yar"
include "./malware/RANSOM_Petya.yar" include "./malware/RANSOM_Petya.yar"
include "./malware/RANSOM_Satana.yar" include "./malware/RANSOM_Satana.yar"
include "./malware/RANSOM_Stampado.yar" include "./malware/RANSOM_Stampado.yar"
......
index_w_mobile.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./Antidebug_AntiVM/antidebug_antivm.yar" include "./Antidebug_AntiVM/antidebug_antivm.yar"
include "./Crypto/base64.yar"
include "./Crypto/crypto_signatures.yar" include "./Crypto/crypto_signatures.yar"
include "./CVE_Rules/CVE-2010-0805.yar" include "./CVE_Rules/CVE-2010-0805.yar"
include "./CVE_Rules/CVE-2010-0887.yar" include "./CVE_Rules/CVE-2010-0887.yar"
...@@ -74,6 +73,7 @@ include "./malware/APT_eqgrp_apr17.yar" ...@@ -74,6 +73,7 @@ include "./malware/APT_eqgrp_apr17.yar"
include "./malware/APT_Equation.yar" include "./malware/APT_Equation.yar"
include "./malware/APT_EQUATIONGRP.yar" include "./malware/APT_EQUATIONGRP.yar"
include "./malware/APT_fancybear_dnc.yar" include "./malware/APT_fancybear_dnc.yar"
include "./malware/APT_fancybear_downdelph.yar"
include "./malware/APT_FiveEyes.yar" include "./malware/APT_FiveEyes.yar"
include "./malware/APT_furtim.yar" include "./malware/APT_furtim.yar"
include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar" include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar"
...@@ -191,6 +191,7 @@ include "./malware/MALW_Lateral_Movement.yar" ...@@ -191,6 +191,7 @@ include "./malware/MALW_Lateral_Movement.yar"
include "./malware/MALW_Lenovo_Superfish.yar" include "./malware/MALW_Lenovo_Superfish.yar"
include "./malware/MALW_LinuxMoose.yar" include "./malware/MALW_LinuxMoose.yar"
include "./malware/MALW_LostDoor.yar" include "./malware/MALW_LostDoor.yar"
include "./malware/MALW_LuaBot.yar"
include "./malware/MALW_LuckyCat.yar" include "./malware/MALW_LuckyCat.yar"
include "./malware/MALW_LURK0.yar" include "./malware/MALW_LURK0.yar"
include "./malware/MALW_MacControl.yar" include "./malware/MALW_MacControl.yar"
...@@ -313,9 +314,11 @@ include "./malware/RANSOM_Comodosec.yar" ...@@ -313,9 +314,11 @@ include "./malware/RANSOM_Comodosec.yar"
include "./malware/RANSOM_Crypren.yar" include "./malware/RANSOM_Crypren.yar"
include "./malware/RANSOM_Cryptolocker.yar" include "./malware/RANSOM_Cryptolocker.yar"
include "./malware/RANSOM_DMALocker.yar" include "./malware/RANSOM_DMALocker.yar"
include "./malware/RANSOM_Erebus.yar"
include "./malware/RANSOM_GoldenEye.yar" include "./malware/RANSOM_GoldenEye.yar"
include "./malware/RANSOM_Locky.yar" include "./malware/RANSOM_Locky.yar"
include "./malware/RANSOM_MS17-010_Wannacrypt.yar" include "./malware/RANSOM_MS17-010_Wannacrypt.yar"
include "./malware/RANSOM_PetrWrap.yar"
include "./malware/RANSOM_Petya.yar" include "./malware/RANSOM_Petya.yar"
include "./malware/RANSOM_Satana.yar" include "./malware/RANSOM_Satana.yar"
include "./malware/RANSOM_Stampado.yar" include "./malware/RANSOM_Stampado.yar"
......
malware_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 14-06-2017 On 01-07-2017
*/ */
include "./malware/APT_APT1.yar" include "./malware/APT_APT1.yar"
include "./malware/APT_APT10.yar" include "./malware/APT_APT10.yar"
...@@ -30,6 +30,7 @@ include "./malware/APT_eqgrp_apr17.yar" ...@@ -30,6 +30,7 @@ include "./malware/APT_eqgrp_apr17.yar"
include "./malware/APT_Equation.yar" include "./malware/APT_Equation.yar"
include "./malware/APT_EQUATIONGRP.yar" include "./malware/APT_EQUATIONGRP.yar"
include "./malware/APT_fancybear_dnc.yar" include "./malware/APT_fancybear_dnc.yar"
include "./malware/APT_fancybear_downdelph.yar"
include "./malware/APT_FiveEyes.yar" include "./malware/APT_FiveEyes.yar"
include "./malware/APT_furtim.yar" include "./malware/APT_furtim.yar"
include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar" include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar"
...@@ -147,6 +148,7 @@ include "./malware/MALW_Lateral_Movement.yar" ...@@ -147,6 +148,7 @@ include "./malware/MALW_Lateral_Movement.yar"
include "./malware/MALW_Lenovo_Superfish.yar" include "./malware/MALW_Lenovo_Superfish.yar"
include "./malware/MALW_LinuxMoose.yar" include "./malware/MALW_LinuxMoose.yar"
include "./malware/MALW_LostDoor.yar" include "./malware/MALW_LostDoor.yar"
include "./malware/MALW_LuaBot.yar"
include "./malware/MALW_LuckyCat.yar" include "./malware/MALW_LuckyCat.yar"
include "./malware/MALW_LURK0.yar" include "./malware/MALW_LURK0.yar"
include "./malware/MALW_MacControl.yar" include "./malware/MALW_MacControl.yar"
...@@ -269,9 +271,11 @@ include "./malware/RANSOM_Comodosec.yar" ...@@ -269,9 +271,11 @@ include "./malware/RANSOM_Comodosec.yar"
include "./malware/RANSOM_Crypren.yar" include "./malware/RANSOM_Crypren.yar"
include "./malware/RANSOM_Cryptolocker.yar" include "./malware/RANSOM_Cryptolocker.yar"
include "./malware/RANSOM_DMALocker.yar" include "./malware/RANSOM_DMALocker.yar"
include "./malware/RANSOM_Erebus.yar"
include "./malware/RANSOM_GoldenEye.yar" include "./malware/RANSOM_GoldenEye.yar"
include "./malware/RANSOM_Locky.yar" include "./malware/RANSOM_Locky.yar"
include "./malware/RANSOM_MS17-010_Wannacrypt.yar" include "./malware/RANSOM_MS17-010_Wannacrypt.yar"
include "./malware/RANSOM_PetrWrap.yar"
include "./malware/RANSOM_Petya.yar" include "./malware/RANSOM_Petya.yar"
include "./malware/RANSOM_Satana.yar" include "./malware/RANSOM_Satana.yar"
include "./malware/RANSOM_Stampado.yar" include "./malware/RANSOM_Stampado.yar"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment