Skip to content

R
rules
Switch branch/tag
You can move around the graph by using the arrow keys.
Created with Raphaël 2.2.019Jan1813876431Dec282521181715103230Nov262524221211229Oct28272014138654225Sep2321201817159724Aug13111075331Jul3028222120168729Jun252423181715121064129May282726252018118765428Apr25212015131211Update general_cloaking.yarUpdate antidebug.yarDelete EXPERIMENTAL_virustotal-rules.yarUpdate THOR_HackTools.yarUpdate THOR_Webshells.yarUpdate Havex.yarUpdate sqlite.yarDelete YahLover.yarDelete generic_anomalies.yarCreate EXPERIMENTAL_virustotal-rules.yarCreate Tinba_Banking_Trojan.yarCreate CAP_Win32Inet.yaraCreate CAP_HookExKeylogger.yarUpdate Havex.yarUpdate and rename Webshell-shell.yar to THOR_Webshells.yarUpdate and rename HackTools.yar to THOR_HackTools.yarCreate generic_anomalies.yarUpdate general_cloaking.yarCreate generic_exe2hex_payload.yarCreate DDoSTf.yarUpdate XOR_DDosv1.yarUpdate and rename derkziel_stealer to malware/Derkziel_Stealer.yarMerge pull request #76 from seifreed/patch-5Create derkziel_stealerCreate APT_Emissary.yarUpdate and rename BlackEnergy.yar to APT_Blackenergy.yarMerge pull request #75 from apolkosnik/patch-1Update rovnix to replace M$ word quotes with ASCII quotation marksCreate Havex_Memdump.yarMerge pull request #73 from 0pc0deFR/masterMerge pull request #72 from seifreed/patch-4Add embedded executable detectionUpdate antidebug.yarCreate Mailers.yarCreate EMAIL_Cryptowall.yarCreate sqlite.yarRename Beef_pretty_theft.yar to EXPERIMENTAL_Beef_pretty_theft.yarRename Beef_Hooked.yar to EXPERIMENTAL_Beef_Hooked.yarCreate APT_Sphinx_Moth.yarUpdate and rename Derusbi.yar to APT_Derusbi.yar