Commits · da8c6b8524138ca252dc8500cdccf5a7fc8331b0 · fact-depend / rules

25 Sep, 2015 1 commit
- Create APT_unit78020_malware.yar · da8c6b85
  mmorenog authored Sep 25, 2015
  
  da8c6b85 Browse Files
23 Sep, 2015 2 commits
- Merge pull request #56 from frbapolkosnik/patch-4 · 92640111
```
Fixed the APT1_aspnetreport and APT1_dbg_mess
```
  mmorenog authored Sep 23, 2015
  92640111 Browse Files
- Merge pull request #55 from niterain/master · 3ac0e9de
```
removed duplicate hash5 string
```
  mmorenog authored Sep 23, 2015
  3ac0e9de Browse Files
21 Sep, 2015 1 commit

Fixed the APT1_aspnetreport and APT1_dbg_mess · bae71bc4

After the rule in issue #39 was commented out, the APT1_aspnetreport, and APT1_dbg_mess got borked, since both rules depended on the APT1_payloads.

authored Sep 21, 2015

bae71bc4 Browse Files

20 Sep, 2015 1 commit
- removed duplicate hash5 string · 488a66ca
  levi stanley authored Sep 20, 2015
  
  488a66ca Browse Files
18 Sep, 2015 4 commits
- Create APT_Irontiger_Trendmicro.yar · 5b82412d
  mmorenog authored Sep 18, 2015
  
  5b82412d Browse Files
- Create APT_irontiger.yara · 9d65e3ca
  mmorenog authored Sep 18, 2015
  
  9d65e3ca Browse Files
- Merge pull request #54 from Koodous/master · adabbbe5
```
Added 2 rules to detect adware and smsfraud APKs
```
  mmorenog authored Sep 18, 2015
  adabbbe5 Browse Files
- Fixed bad example sample and add one more rule · a63977cc
  Antonio S authored Sep 18, 2015
  
  a63977cc Browse Files
17 Sep, 2015 2 commits
- Generic SMS Fraud rule · 1f8c2e21
  Antonio S authored Sep 17, 2015
  
  1f8c2e21 Browse Files
- Generic Adware rule · 0e0bd14c
  Antonio S authored Sep 17, 2015
  
  0e0bd14c Browse Files
15 Sep, 2015 2 commits
- Create gen_faked_versions.yar · 63b8f118
  mmorenog authored Sep 15, 2015
  
  63b8f118 Browse Files
- Update general_cloaking.yar · d8456ebd
  mmorenog authored Sep 15, 2015
  
  d8456ebd Browse Files
09 Sep, 2015 2 commits
- Commenting out high FP rules as per issue #39 · 84a474ce
  jovimon authored Sep 09, 2015
  
  84a474ce Browse Files
- Adding new rules from pr/52 · 1275165d
  jovimon authored Sep 09, 2015
  
  1275165d Browse Files
07 Sep, 2015 2 commits
- Create APT_Carbanak2.yar · a9ace175
  mmorenog authored Sep 07, 2015
  
  a9ace175 Browse Files
- Create js_obfuscator.yar · d21cf41b
  mmorenog authored Sep 07, 2015
  
  d21cf41b Browse Files
24 Aug, 2015 7 commits
- Rename mobile malware folder · 82f4a4cc
  jovimon authored Aug 24, 2015
  
  82f4a4cc Browse Files
- Create APT_bluetermite_emdivi.yar · d167181f
  mmorenog authored Aug 24, 2015
  
  d167181f Browse Files
- Update APT_threatgroup_3390.yar · 25f5079b
```
Bugfix
```
  mmorenog authored Aug 24, 2015
  25f5079b Browse Files
- Update Android_malware_SMSsender.yar · de41c72b
  mmorenog authored Aug 24, 2015
  
  de41c72b Browse Files
- Create Wabot.yar · 842f81e7
  mmorenog authored Aug 24, 2015
  
  842f81e7 Browse Files
- Create xRAT20.yar · 57b4f388
  mmorenog authored Aug 24, 2015
  
  57b4f388 Browse Files
- Create APT_korplug_fast.yar · 2702940b
  mmorenog authored Aug 24, 2015
  
  2702940b Browse Files
13 Aug, 2015 1 commit
- Create APT_CVE2015_5119.yar · 4111e399
  mmorenog authored Aug 13, 2015
  
  4111e399 Browse Files
11 Aug, 2015 1 commit
- Update readme. · a4394c93
  Jose Vila authored Aug 11, 2015
  
  a4394c93 Browse Files
10 Aug, 2015 2 commits
- Androguard yara module published. Update androguard disclaimer. · 22f2791e
  Jose Vila authored Aug 10, 2015
  
  22f2791e Browse Files
- Create APT_CheshireCat.yar · 15a48dd2
  mmorenog authored Aug 10, 2015
  
  15a48dd2 Browse Files
07 Aug, 2015 2 commits
- update license · ab9151a4
  Jose Vila authored Aug 07, 2015
  
  ab9151a4 Browse Files
- Add Threatgroup 3390 rules from Loki.… · 91e8e523
```
Add Threatgroup 3390 rules from Loki. https://github.com/Neo23x0/Loki/blob/9115483427fc110ce022f33434b818a0092c5242/signatures/apt_threatgroup_3390.yar
```
  Jose Vila authored Aug 07, 2015
  91e8e523 Browse Files
05 Aug, 2015 4 commits
- Rename Operation_Potato.yar to Operation_Potao.yar · 7fe6b129
  mmorenog authored Aug 05, 2015
  
  7fe6b129 Browse Files
- Create Operation_Potato.yar · efd057fe
  mmorenog authored Aug 05, 2015
  
  efd057fe Browse Files
- Create APT_Terracota.yar · 8dbb10b9
  mmorenog authored Aug 05, 2015
  
  8dbb10b9 Browse Files
- Create APT_Terracota_Liudoor.yar · 018ee830
  mmorenog authored Aug 05, 2015
  
  018ee830 Browse Files
03 Aug, 2015 3 commits
- Added androguard disclaimer to mobile malware files · 8b46f9be
  Yara Rules authored Aug 03, 2015
  
  8b46f9be Browse Files
- Merge pull request #43 from frbapolkosnik/patch-1 · da8975e7
```
fix a weird quotation character
```
  jovimon authored Aug 03, 2015
  da8975e7 Browse Files
- Merge pull request #41 from fedelemantuano/UACElevator · 2383957c
```
Removed duplicate rule UACElevator (already exist exploit_uac_elevators.yar).
```
  jovimon authored Aug 03, 2015
  2383957c Browse Files
31 Jul, 2015 1 commit

fix a weird quotation character · dc7e6e92

Hey, maybe you guys can set up a pre-commit test before commit happens and run the changes against yarac or something.

authored Jul 31, 2015

dc7e6e92 Browse Files

30 Jul, 2015 2 commits
- Removed duplicate rule UACElevator (already exist exploit_uac_elevators.yar) · 29e560e1
```
Error duplicated identifier "UACElevator" if used in cuckoobox
```
  Fedele Mantuano authored Jul 30, 2015
  29e560e1 Browse Files
- Update HackTools.yar · 749d85ea
  mmorenog authored Jul 30, 2015
  
  749d85ea Browse Files