Skip to content

R
rules
Switch branch/tag
You can move around the graph by using the arrow keys.
Created with Raphaël 2.2.018May1716131210654228Apr2719765129Mar22171087129Feb2827262523151110984128Jan2520191813876431Dec282521181715103230Nov262524221211229Oct28272014138654225Sep2321201817159724Aug13111075331Jul3028222120168729Jun252423181715121064129May282726252018118765428Apr25212015131211Update APT_Prikormka.yarCreate APT_Prikormka.yarMerge pull request #111 from bartblaze/patch-1Retefe.yaradd pyinstaller rulerename Crypren_ransomware file.Merge branch 'seifreed-patch-17'Create Crypren_ransomwareUpdate and rename VikingOrder.yar to Android_VikingOrder.yarCreate VikingOrder.yarUpdate and rename apt_win32_dll_bergard_pgv_pvid_variant to APT_win32_dll_bergard_pgv_pvid_variant.yarMerge pull request #109 from seifreed/patch-16Create apt_win32_dll_bergard_pgv_pvid_variantCreate Android_Dectus_rswm.yarCreate MW_elknot_xor.yarMerge pull request #107 from plutec/masterUpdate and rename Android_RuMMS to Android_RuMMS.yarMerge pull request #108 from R3vrseShell/patch-2Create Android_RuMMSAdded APKs that use towelroot exploitMerge pull request #106 from plutec/masterFixed problem with duplicated identifierCreate Rockloader.yarCreate APT_UP007_SLServer.yarCreate Ransomware_Petya.yarMerge pull request #104 from plutec/masterAdded rule to detect Tachi for AndroidUpdate APT_Hizor_RAT.yarCreate Ransom_TeslaCrypt.yarCreate APT_win32_dll_rat_hiZorRAT.yarUpdate antidebug_antivm.yarUpdate crypto.yarUpdate Android_malware_SMSsender.yarUpdate Android_Triada_Banking.yarUpdate Android_Metasploit.yarUpdate urls.yarUpdate scam.yarUpdate image.yarUpdate email_Ukraine_BE_powerattack.yarUpdate attachment.yar