Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
R
rules
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
fact-depend
rules
Commits
a58ac338
Commit
a58ac338
authored
Oct 24, 2016
by
jovimon
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
renaming some very long rules on WShell_THOR file and recreating index files.
parent
b2a387ca
Expand all
Show whitespace changes
Inline
Side-by-side
Showing
11 changed files
with
16 additions
and
11 deletions
+16
-11
Antidebug_AntiVM_index.yar
Antidebug_AntiVM_index.yar
+1
-1
CVE_Rules_index.yar
CVE_Rules_index.yar
+1
-1
Crypto_index.yar
Crypto_index.yar
+1
-1
Exploit-Kits_index.yar
Exploit-Kits_index.yar
+1
-1
Malicious_Documents_index.yar
Malicious_Documents_index.yar
+1
-1
Mobile_Malware_index.yar
Mobile_Malware_index.yar
+2
-2
Packers_index.yar
Packers_index.yar
+1
-1
WShell_THOR_Webshells.yar
Webshells/WShell_THOR_Webshells.yar
+0
-0
Webshells_index.yar
Webshells_index.yar
+1
-1
email_index.yar
email_index.yar
+1
-1
malware_index.yar
malware_index.yar
+6
-1
No files found.
Antidebug_AntiVM_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./Antidebug_AntiVM/antidebug_antivm.yar"
include "./Antidebug_AntiVM/antidebug_antivm.yar"
CVE_Rules_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./CVE_Rules/CVE-2010-0805.yar"
include "./CVE_Rules/CVE-2010-0805.yar"
include "./CVE_Rules/CVE-2010-0887.yar"
include "./CVE_Rules/CVE-2010-0887.yar"
...
...
Crypto_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./Crypto/base64.yar"
include "./Crypto/base64.yar"
include "./Crypto/crypto_signatures.yar"
include "./Crypto/crypto_signatures.yar"
Exploit-Kits_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./Exploit-Kits/EK_Angler.yar"
include "./Exploit-Kits/EK_Angler.yar"
include "./Exploit-Kits/EK_Blackhole.yar"
include "./Exploit-Kits/EK_Blackhole.yar"
...
...
Malicious_Documents_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar"
include "./Malicious_Documents/Maldoc_APT_OLE_JSRat.yar"
include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar"
include "./Malicious_Documents/Maldoc_Contains_VBE_File.yar"
...
...
Mobile_Malware_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./Mobile_Malware/Android_adware.yar"
include "./Mobile_Malware/Android_adware.yar"
include "./Mobile_Malware/Android_AliPay_smsStealer.yar"
include "./Mobile_Malware/Android_AliPay_smsStealer.yar"
...
@@ -22,6 +22,7 @@ include "./Mobile_Malware/Android_generic_adware.yar"
...
@@ -22,6 +22,7 @@ include "./Mobile_Malware/Android_generic_adware.yar"
include "./Mobile_Malware/Android_generic_smsfraud.yar"
include "./Mobile_Malware/Android_generic_smsfraud.yar"
include "./Mobile_Malware/Android_Godless.yar"
include "./Mobile_Malware/Android_Godless.yar"
include "./Mobile_Malware/Android_Libyan_Scorpions.yar"
include "./Mobile_Malware/Android_Libyan_Scorpions.yar"
include "./Mobile_Malware/Android_MalwareCertificates.yar"
include "./Mobile_Malware/Android_malware_Advertising.yar"
include "./Mobile_Malware/Android_malware_Advertising.yar"
include "./Mobile_Malware/Android_malware_banker.yar"
include "./Mobile_Malware/Android_malware_banker.yar"
include "./Mobile_Malware/Android_malware_ChinesePorn.yar"
include "./Mobile_Malware/Android_malware_ChinesePorn.yar"
...
@@ -33,7 +34,6 @@ include "./Mobile_Malware/Android_malware_SMSsender.yar"
...
@@ -33,7 +34,6 @@ include "./Mobile_Malware/Android_malware_SMSsender.yar"
include "./Mobile_Malware/Android_Malware_Tinhvan.yar"
include "./Mobile_Malware/Android_Malware_Tinhvan.yar"
include "./Mobile_Malware/Android_Malware_Towelroot.yar"
include "./Mobile_Malware/Android_Malware_Towelroot.yar"
include "./Mobile_Malware/Android_malware_xbot007.yar"
include "./Mobile_Malware/Android_malware_xbot007.yar"
include "./Mobile_Malware/Android_MalwareCertificates.yar"
include "./Mobile_Malware/Android_mapin.yar"
include "./Mobile_Malware/Android_mapin.yar"
include "./Mobile_Malware/Android_Marcher_2.yar"
include "./Mobile_Malware/Android_Marcher_2.yar"
include "./Mobile_Malware/Android_MazarBot_z.yar"
include "./Mobile_Malware/Android_MazarBot_z.yar"
...
...
Packers_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./Packers/Javascript_exploit_and_obfuscation.yar"
include "./Packers/Javascript_exploit_and_obfuscation.yar"
include "./Packers/JJencode.yar"
include "./Packers/JJencode.yar"
...
...
Webshells/WShell_THOR_Webshells.yar
View file @
a58ac338
This diff is collapsed.
Click to expand it.
Webshells_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./Webshells/WShell_APT_Laudanum.yar"
include "./Webshells/WShell_APT_Laudanum.yar"
include "./Webshells/Wshell_ChineseSpam.yar"
include "./Webshells/Wshell_ChineseSpam.yar"
...
...
email_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./email/attachment.yar"
include "./email/attachment.yar"
include "./email/bank_rule.yar"
include "./email/bank_rule.yar"
...
...
malware_index.yar
View file @
a58ac338
/*
/*
Generated by Yara-Rules
Generated by Yara-Rules
On
06
-10-2016
On
24
-10-2016
*/
*/
include "./malware/APT_APT1.yar"
include "./malware/APT_APT1.yar"
include "./malware/APT_APT17.yar"
include "./malware/APT_APT17.yar"
...
@@ -78,6 +78,7 @@ include "./malware/MALW_Atmos.yar"
...
@@ -78,6 +78,7 @@ include "./malware/MALW_Atmos.yar"
include "./malware/MALW_BackdoorSSH.yar"
include "./malware/MALW_BackdoorSSH.yar"
include "./malware/MALW_Backoff.yar"
include "./malware/MALW_Backoff.yar"
include "./malware/MALW_Bangat.yar"
include "./malware/MALW_Bangat.yar"
include "./malware/MALW_Batel.yar"
include "./malware/MALW_BlackRev.yar"
include "./malware/MALW_BlackRev.yar"
include "./malware/MALW_BlackWorm.yar"
include "./malware/MALW_BlackWorm.yar"
include "./malware/MALW_Boouset.yar"
include "./malware/MALW_Boouset.yar"
...
@@ -143,6 +144,7 @@ include "./malware/MALW_Notepad.yar"
...
@@ -143,6 +144,7 @@ include "./malware/MALW_Notepad.yar"
include "./malware/MALW_NSFree.yar"
include "./malware/MALW_NSFree.yar"
include "./malware/MALW_Olyx.yar"
include "./malware/MALW_Olyx.yar"
include "./malware/MALW_OSX_Leverage.yar"
include "./malware/MALW_OSX_Leverage.yar"
include "./malware/MALW_PE_sections.yar"
include "./malware/MALW_PittyTiger.yar"
include "./malware/MALW_PittyTiger.yar"
include "./malware/MALW_Ponmocup.yar"
include "./malware/MALW_Ponmocup.yar"
include "./malware/MALW_Pony.yar"
include "./malware/MALW_Pony.yar"
...
@@ -173,6 +175,7 @@ include "./malware/MALW_TreasureHunt.yar"
...
@@ -173,6 +175,7 @@ include "./malware/MALW_TreasureHunt.yar"
include "./malware/MALW_Upatre.yar"
include "./malware/MALW_Upatre.yar"
include "./malware/MALW_Urausy.yar"
include "./malware/MALW_Urausy.yar"
include "./malware/MALW_Vidgrab.yar"
include "./malware/MALW_Vidgrab.yar"
include "./malware/MALW_viotto_keylogger.yar"
include "./malware/MALW_Wabot.yar"
include "./malware/MALW_Wabot.yar"
include "./malware/MALW_Warp.yar"
include "./malware/MALW_Warp.yar"
include "./malware/MALW_Wimmie.yar"
include "./malware/MALW_Wimmie.yar"
...
@@ -239,6 +242,8 @@ include "./malware/RANSOM_Cryptolocker.yar"
...
@@ -239,6 +242,8 @@ include "./malware/RANSOM_Cryptolocker.yar"
include "./malware/RANSOM_DMALocker.yar"
include "./malware/RANSOM_DMALocker.yar"
include "./malware/RANSOM_Locky.yar"
include "./malware/RANSOM_Locky.yar"
include "./malware/RANSOM_Petya.yar"
include "./malware/RANSOM_Petya.yar"
include "./malware/RANSOM_Satana.yar"
include "./malware/RANSOM_Stampado.yar"
include "./malware/RANSOM_TeslaCrypt.yar"
include "./malware/RANSOM_TeslaCrypt.yar"
include "./malware/RANSOM_Tox.yar"
include "./malware/RANSOM_Tox.yar"
include "./malware/RAT_Adwind.yar"
include "./malware/RAT_Adwind.yar"
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment