Commits · c7c914003c73e5f5af693b0cacb809f737376d70 · fact-depend / rules

24 Dec, 2020 2 commits
- added stuxnet python source code rule · c7c91400
  Jin Kim authored 4 years ago
  
  c7c91400 Browse Directory
- added rule for python stuxnet source code. · 4f362cca
  Jin Kim authored 4 years ago
  
  4f362cca Browse Directory
01 Jul, 2020 1 commit
- Fixing issues · a4a25120
  Xumeiquer authored 5 years ago
  
  Unverified
  a4a25120 Browse Directory
30 Jun, 2020 17 commits
- add .yar extension · 05f0684e
  lcol3117 authored 5 years ago
  
  Unverified
  05f0684e Browse Directory
- add .yar extension · 43fbf2e4
  lcol3117 authored 5 years ago
  
  Unverified
  43fbf2e4 Browse Directory
- add .yar extension · e514042b
  lcol3117 authored 5 years ago
  
  Unverified
  e514042b Browse Directory
- add .yar extension · e8e9a5c1
  lcol3117 authored 5 years ago
  
  Unverified
  e8e9a5c1 Browse Directory
- add .yar extension · 86cf4c1c
  lcol3117 authored 5 years ago
  
  Unverified
  86cf4c1c Browse Directory
- add .yar extension · 6fc3a568
  lcol3117 authored 5 years ago
  
  Unverified
  6fc3a568 Browse Directory
- add .yar extension · 95d2648f
  lcol3117 authored 5 years ago
  
  Unverified
  95d2648f Browse Directory
- fix typo, there is a space in the reference · 75f29f14
```
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-august-31st-2018-devs-on-vacation/
is mentioned as the reference, and the picture has a space between “the” and “decryption”.
```
  lcol3117 authored 5 years ago
  Unverified
  75f29f14 Browse Directory
- add .yar extension · 33dd74c8
  lcol3117 authored 5 years ago
  
  Unverified
  33dd74c8 Browse Directory
- add .yar extension · 994d3dec
  lcol3117 authored 5 years ago
  
  Unverified
  994d3dec Browse Directory
- add .yar extension · 1edbe8e0
  lcol3117 authored 5 years ago
  
  Unverified
  1edbe8e0 Browse Directory
- add .yar extension · 724127d7
  lcol3117 authored 5 years ago
  
  Unverified
  724127d7 Browse Directory
- add .yar extension · 0dceaf7b
  lcol3117 authored 5 years ago
  
  Unverified
  0dceaf7b Browse Directory
- add .yar extension · 7a02b74f
  lcol3117 authored 5 years ago
  
  Unverified
  7a02b74f Browse Directory
- add .yar extension · cb219040
  lcol3117 authored 5 years ago
  
  Unverified
  cb219040 Browse Directory
- add .yar extension · 91173e61
  lcol3117 authored 5 years ago
  
  Unverified
  91173e61 Browse Directory
- add .yar extension · af96d415
  lcol3117 authored 5 years ago
  
  Unverified
  af96d415 Browse Directory
28 Jun, 2020 3 commits
- remove spaces before "rule Retefe" in MALW_Retefe.yar · e59cdda7
```
Signed-off-by: Ryan B <randomrhythm@rhythmengineering.com>
```
  Ryan B authored 5 years ago
  e59cdda7 Browse Directory
- add .yar extension to ransom rules and add to index · a696d670
```
Signed-off-by: Ryan B <randomrhythm@rhythmengineering.com>
```
  Ryan B authored 5 years ago
  a696d670 Browse Directory
- rename malware rules missing .yar extension and add to index. · 2e9fc310
```
Signed-off-by: Ryan B <randomrhythm@rhythmengineering.com>
```
  Ryan B authored 5 years ago
  2e9fc310 Browse Directory
23 May, 2020 1 commit
- Renamed poetRAT to avoid dupes + adjusted critera · 4c8e2a5f
```
The regex for RAT_PoetRATPython was generating false positives. Adjusted
rule to need hits on at least 3 of the strings
```
  spaddex authored 5 years ago
  Unverified
  4c8e2a5f Browse Directory
15 May, 2020 1 commit
- Snake Ransomware yara rule · 2d9f8ffe
  Nishan8583 authored 5 years ago
  
  2d9f8ffe Browse Directory
14 May, 2020 1 commit
- new yara rule for AsyncRAT · fa6941b0
  Johannes Bader authored 5 years ago
  
  fa6941b0 Browse Directory
07 May, 2020 1 commit
- Rules updated to be more focused on the malware as requested · 35db229a
  Nishan8583 authored 5 years ago
  
  35db229a Browse Directory
06 May, 2020 1 commit
- Poet Rat Rules · 39a0cc1e
  Nishan8583 authored 5 years ago
  
  39a0cc1e Browse Directory
24 Feb, 2020 1 commit
- Renamed Njrat to Njrat2 in terms to avoid conflicts · 2bb79cb6
  Jaume Martin authored 5 years ago
  
  Unverified
  2bb79cb6 Browse Directory
17 Jan, 2020 1 commit
- Move more generic rules to capabilities category. · d2bc685a
  Frank Poz authored 5 years ago
  
  d2bc685a Browse Directory
14 Jan, 2020 1 commit
- Create MalConfScan.yar · b01380d5
  Jaume Martin authored 5 years ago
  
  Unverified
  b01380d5 Browse Directory
07 Jan, 2020 2 commits
- Update MALW_MSILStealer.yar · c453c861
  jovimon authored 5 years ago
  
  Unverified
  c453c861 Browse Directory
- Update MALW_FUDCrypt.yar · 1af2e2f3
  jovimon authored 5 years ago
  
  Unverified
  1af2e2f3 Browse Directory
13 Dec, 2019 1 commit

fix RomeoFoxtrot YARA > 3.3.0 hex issue · 70f5ca70

see https://github.com/VirusTotal/yara/issues/911#issuecomment-404324560

will propagate to https://github.com/Yara-Rules/rules/pull/348

authored 5 years ago

Unverified

70f5ca70 Browse Directory

12 Dec, 2019 1 commit
- Update WhiskeyBravo_mod.yara · 92dff73c
```
41badf10ef6f469dd1c3be201aba809f9c42f86ad77d7f83bc3895bfa289c635 is WhiskeyDelta
```
  Rony authored 5 years ago
  Unverified
  92dff73c Browse Directory
24 Nov, 2019 1 commit
- Create RANSOM_Maze.yar · 4e88977f
  Bart authored 5 years ago
  
  Unverified
  4e88977f Browse Directory
22 Nov, 2019 2 commits
- Create MALW_MSILStealer.yar · b9eb0259
  HWVS authored 5 years ago
  
  Unverified
  b9eb0259 Browse Directory
- Create MALW_FUDCrypt.yar · b6304e92
  HWVS authored 5 years ago
  
  Unverified
  b6304e92 Browse Directory
11 Sep, 2019 1 commit
- Updated and renamed name file APT_FIN7 · 76d87e8f
  j0sm1 authored 5 years ago
  
  Unverified
  76d87e8f Browse Directory
13 Aug, 2019 1 commit
- new rules for MedusaHTTP version from 2019 and AlMashreq agent. · 7f9c5902
  Jamie Bennion authored 5 years ago
  
  7f9c5902 Browse Directory