Skip to content

R
rules
Commit 53b8efd9 by Jaume Martin
Options

Index regenerated

parent e0e4f81c
Showing with 24 additions and 15 deletions
Antidebug_AntiVM_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Antidebug_AntiVM/antidebug_antivm.yar" include "./Antidebug_AntiVM/antidebug_antivm.yar"
CVE_Rules_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./CVE_Rules/CVE-2010-0805.yar" include "./CVE_Rules/CVE-2010-0805.yar"
include "./CVE_Rules/CVE-2010-0887.yar" include "./CVE_Rules/CVE-2010-0887.yar"
......
Crypto_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Crypto/crypto_signatures.yar" include "./Crypto/crypto_signatures.yar"
Exploit-Kits_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Exploit-Kits/EK_Angler.yar" include "./Exploit-Kits/EK_Angler.yar"
include "./Exploit-Kits/EK_Blackhole.yar" include "./Exploit-Kits/EK_Blackhole.yar"
......
Malicious_Documents_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar" include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar"
include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar" include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar"
include "./Malicious_Documents/Maldoc_CVE-2017-0199.yar" include "./Malicious_Documents/Maldoc_CVE-2017-0199.yar"
include "./Malicious_Documents/Maldoc_CVE_2017_8759.yar"
include "./Malicious_Documents/Maldoc_Dridex.yar" include "./Malicious_Documents/Maldoc_Dridex.yar"
include "./Malicious_Documents/Maldoc_Hidden_PE_file.yar" include "./Malicious_Documents/Maldoc_Hidden_PE_file.yar"
include "./Malicious_Documents/Maldoc_malrtf_ole2link.yar" include "./Malicious_Documents/Maldoc_malrtf_ole2link.yar"
......
Mobile_Malware_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Mobile_Malware/Android_adware.yar" include "./Mobile_Malware/Android_adware.yar"
include "./Mobile_Malware/Android_AliPay_smsStealer.yar" include "./Mobile_Malware/Android_AliPay_smsStealer.yar"
......
Packers_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Packers/Javascript_exploit_and_obfuscation.yar" include "./Packers/Javascript_exploit_and_obfuscation.yar"
include "./Packers/JJencode.yar" include "./Packers/JJencode.yar"
......
Webshells_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Webshells/WShell_APT_Laudanum.yar" include "./Webshells/WShell_APT_Laudanum.yar"
include "./Webshells/Wshell_ChineseSpam.yar" include "./Webshells/Wshell_ChineseSpam.yar"
......
email_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./email/attachment.yar" include "./email/attachment.yar"
include "./email/bank_rule.yar" include "./email/bank_rule.yar"
......
index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Antidebug_AntiVM/antidebug_antivm.yar" include "./Antidebug_AntiVM/antidebug_antivm.yar"
include "./Crypto/crypto_signatures.yar" include "./Crypto/crypto_signatures.yar"
...@@ -36,6 +36,7 @@ include "./Exploit-Kits/EK_Zeus.yar" ...@@ -36,6 +36,7 @@ include "./Exploit-Kits/EK_Zeus.yar"
include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar" include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar"
include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar" include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar"
include "./Malicious_Documents/Maldoc_CVE-2017-0199.yar" include "./Malicious_Documents/Maldoc_CVE-2017-0199.yar"
include "./Malicious_Documents/Maldoc_CVE_2017_8759.yar"
include "./Malicious_Documents/Maldoc_Dridex.yar" include "./Malicious_Documents/Maldoc_Dridex.yar"
include "./Malicious_Documents/Maldoc_Hidden_PE_file.yar" include "./Malicious_Documents/Maldoc_Hidden_PE_file.yar"
include "./Malicious_Documents/Maldoc_malrtf_ole2link.yar" include "./Malicious_Documents/Maldoc_malrtf_ole2link.yar"
...@@ -74,6 +75,7 @@ include "./malware/APT_Equation.yar" ...@@ -74,6 +75,7 @@ include "./malware/APT_Equation.yar"
include "./malware/APT_EQUATIONGRP.yar" include "./malware/APT_EQUATIONGRP.yar"
include "./malware/APT_fancybear_dnc.yar" include "./malware/APT_fancybear_dnc.yar"
include "./malware/APT_fancybear_downdelph.yar" include "./malware/APT_fancybear_downdelph.yar"
include "./malware/APT_FIN7.yar"
include "./malware/APT_FiveEyes.yar" include "./malware/APT_FiveEyes.yar"
include "./malware/APT_furtim.yar" include "./malware/APT_furtim.yar"
include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar" include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar"
...@@ -130,12 +132,12 @@ include "./malware/APT_Winnti.yar" ...@@ -130,12 +132,12 @@ include "./malware/APT_Winnti.yar"
include "./malware/APT_WoolenGoldfish.yar" include "./malware/APT_WoolenGoldfish.yar"
include "./malware/EXPERIMENTAL_Beef.yar" include "./malware/EXPERIMENTAL_Beef.yar"
include "./malware/GEN_PowerShell.yar" include "./malware/GEN_PowerShell.yar"
include "./malware/MALW_AdGholas.yar"
include "./malware/MALW_adwind_RAT.yar" include "./malware/MALW_adwind_RAT.yar"
include "./malware/MALW_Alina.yar" include "./malware/MALW_Alina.yar"
include "./malware/MALW_Andromeda.yar" include "./malware/MALW_Andromeda.yar"
include "./malware/MALW_Athena.yar" include "./malware/MALW_Athena.yar"
include "./malware/MALW_Atmos.yar" include "./malware/MALW_Atmos.yar"
include "./malware/MALW_AZORult.yar"
include "./malware/MALW_BackdoorSSH.yar" include "./malware/MALW_BackdoorSSH.yar"
include "./malware/MALW_Backoff.yar" include "./malware/MALW_Backoff.yar"
include "./malware/MALW_Bangat.yar" include "./malware/MALW_Bangat.yar"
...@@ -221,6 +223,7 @@ include "./malware/MALW_Ponmocup.yar" ...@@ -221,6 +223,7 @@ include "./malware/MALW_Ponmocup.yar"
include "./malware/MALW_Pony.yar" include "./malware/MALW_Pony.yar"
include "./malware/MALW_PubSab.yar" include "./malware/MALW_PubSab.yar"
include "./malware/MALW_Pyinstaller.yar" include "./malware/MALW_Pyinstaller.yar"
include "./malware/MALW_PyPI.yar"
include "./malware/MALW_Quarian.yar" include "./malware/MALW_Quarian.yar"
include "./malware/MALW_Regsubdat.yar" include "./malware/MALW_Regsubdat.yar"
include "./malware/MALW_Retefe.yar" include "./malware/MALW_Retefe.yar"
......
index_w_mobile.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./Antidebug_AntiVM/antidebug_antivm.yar" include "./Antidebug_AntiVM/antidebug_antivm.yar"
include "./Crypto/crypto_signatures.yar" include "./Crypto/crypto_signatures.yar"
...@@ -36,6 +36,7 @@ include "./Exploit-Kits/EK_Zeus.yar" ...@@ -36,6 +36,7 @@ include "./Exploit-Kits/EK_Zeus.yar"
include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar" include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar"
include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar" include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar"
include "./Malicious_Documents/Maldoc_CVE-2017-0199.yar" include "./Malicious_Documents/Maldoc_CVE-2017-0199.yar"
include "./Malicious_Documents/Maldoc_CVE_2017_8759.yar"
include "./Malicious_Documents/Maldoc_Dridex.yar" include "./Malicious_Documents/Maldoc_Dridex.yar"
include "./Malicious_Documents/Maldoc_Hidden_PE_file.yar" include "./Malicious_Documents/Maldoc_Hidden_PE_file.yar"
include "./Malicious_Documents/Maldoc_malrtf_ole2link.yar" include "./Malicious_Documents/Maldoc_malrtf_ole2link.yar"
...@@ -74,6 +75,7 @@ include "./malware/APT_Equation.yar" ...@@ -74,6 +75,7 @@ include "./malware/APT_Equation.yar"
include "./malware/APT_EQUATIONGRP.yar" include "./malware/APT_EQUATIONGRP.yar"
include "./malware/APT_fancybear_dnc.yar" include "./malware/APT_fancybear_dnc.yar"
include "./malware/APT_fancybear_downdelph.yar" include "./malware/APT_fancybear_downdelph.yar"
include "./malware/APT_FIN7.yar"
include "./malware/APT_FiveEyes.yar" include "./malware/APT_FiveEyes.yar"
include "./malware/APT_furtim.yar" include "./malware/APT_furtim.yar"
include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar" include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar"
...@@ -130,12 +132,12 @@ include "./malware/APT_Winnti.yar" ...@@ -130,12 +132,12 @@ include "./malware/APT_Winnti.yar"
include "./malware/APT_WoolenGoldfish.yar" include "./malware/APT_WoolenGoldfish.yar"
include "./malware/EXPERIMENTAL_Beef.yar" include "./malware/EXPERIMENTAL_Beef.yar"
include "./malware/GEN_PowerShell.yar" include "./malware/GEN_PowerShell.yar"
include "./malware/MALW_AdGholas.yar"
include "./malware/MALW_adwind_RAT.yar" include "./malware/MALW_adwind_RAT.yar"
include "./malware/MALW_Alina.yar" include "./malware/MALW_Alina.yar"
include "./malware/MALW_Andromeda.yar" include "./malware/MALW_Andromeda.yar"
include "./malware/MALW_Athena.yar" include "./malware/MALW_Athena.yar"
include "./malware/MALW_Atmos.yar" include "./malware/MALW_Atmos.yar"
include "./malware/MALW_AZORult.yar"
include "./malware/MALW_BackdoorSSH.yar" include "./malware/MALW_BackdoorSSH.yar"
include "./malware/MALW_Backoff.yar" include "./malware/MALW_Backoff.yar"
include "./malware/MALW_Bangat.yar" include "./malware/MALW_Bangat.yar"
...@@ -221,6 +223,7 @@ include "./malware/MALW_Ponmocup.yar" ...@@ -221,6 +223,7 @@ include "./malware/MALW_Ponmocup.yar"
include "./malware/MALW_Pony.yar" include "./malware/MALW_Pony.yar"
include "./malware/MALW_PubSab.yar" include "./malware/MALW_PubSab.yar"
include "./malware/MALW_Pyinstaller.yar" include "./malware/MALW_Pyinstaller.yar"
include "./malware/MALW_PyPI.yar"
include "./malware/MALW_Quarian.yar" include "./malware/MALW_Quarian.yar"
include "./malware/MALW_Regsubdat.yar" include "./malware/MALW_Regsubdat.yar"
include "./malware/MALW_Retefe.yar" include "./malware/MALW_Retefe.yar"
......
malware_index.yar
/* /*
Generated by Yara-Rules Generated by Yara-Rules
On 13-09-2017 On 10-10-2017
*/ */
include "./malware/APT_APT1.yar" include "./malware/APT_APT1.yar"
include "./malware/APT_APT10.yar" include "./malware/APT_APT10.yar"
...@@ -31,6 +31,7 @@ include "./malware/APT_Equation.yar" ...@@ -31,6 +31,7 @@ include "./malware/APT_Equation.yar"
include "./malware/APT_EQUATIONGRP.yar" include "./malware/APT_EQUATIONGRP.yar"
include "./malware/APT_fancybear_dnc.yar" include "./malware/APT_fancybear_dnc.yar"
include "./malware/APT_fancybear_downdelph.yar" include "./malware/APT_fancybear_downdelph.yar"
include "./malware/APT_FIN7.yar"
include "./malware/APT_FiveEyes.yar" include "./malware/APT_FiveEyes.yar"
include "./malware/APT_furtim.yar" include "./malware/APT_furtim.yar"
include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar" include "./malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar"
...@@ -87,12 +88,12 @@ include "./malware/APT_Winnti.yar" ...@@ -87,12 +88,12 @@ include "./malware/APT_Winnti.yar"
include "./malware/APT_WoolenGoldfish.yar" include "./malware/APT_WoolenGoldfish.yar"
include "./malware/EXPERIMENTAL_Beef.yar" include "./malware/EXPERIMENTAL_Beef.yar"
include "./malware/GEN_PowerShell.yar" include "./malware/GEN_PowerShell.yar"
include "./malware/MALW_AdGholas.yar"
include "./malware/MALW_adwind_RAT.yar" include "./malware/MALW_adwind_RAT.yar"
include "./malware/MALW_Alina.yar" include "./malware/MALW_Alina.yar"
include "./malware/MALW_Andromeda.yar" include "./malware/MALW_Andromeda.yar"
include "./malware/MALW_Athena.yar" include "./malware/MALW_Athena.yar"
include "./malware/MALW_Atmos.yar" include "./malware/MALW_Atmos.yar"
include "./malware/MALW_AZORult.yar"
include "./malware/MALW_BackdoorSSH.yar" include "./malware/MALW_BackdoorSSH.yar"
include "./malware/MALW_Backoff.yar" include "./malware/MALW_Backoff.yar"
include "./malware/MALW_Bangat.yar" include "./malware/MALW_Bangat.yar"
...@@ -178,6 +179,7 @@ include "./malware/MALW_Ponmocup.yar" ...@@ -178,6 +179,7 @@ include "./malware/MALW_Ponmocup.yar"
include "./malware/MALW_Pony.yar" include "./malware/MALW_Pony.yar"
include "./malware/MALW_PubSab.yar" include "./malware/MALW_PubSab.yar"
include "./malware/MALW_Pyinstaller.yar" include "./malware/MALW_Pyinstaller.yar"
include "./malware/MALW_PyPI.yar"
include "./malware/MALW_Quarian.yar" include "./malware/MALW_Quarian.yar"
include "./malware/MALW_Regsubdat.yar" include "./malware/MALW_Regsubdat.yar"
include "./malware/MALW_Retefe.yar" include "./malware/MALW_Retefe.yar"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment