malware · eb6c420b373434956cd45711f542ef834de7ef69 · fact-depend / rules

Create Ransomware_Petya_MS17_010 · eb6c420b

From https://www.fireeye.com/blog/threat-research/2017/06/petya-ransomware-spreading-via-eternalblue-exploit.html

authored Jun 27, 2017

eb6c420b

Name	Last commit	Last update
..
Operation_Blockbuster		Loading commit data...
APT1.yar		Loading commit data...
APT3102.yar		Loading commit data...
APT9002.yar		Loading commit data...
APT_APT17.yar		Loading commit data...
APT_Bestia.yar		Loading commit data...
APT_Blackenergy.yar		Loading commit data...
APT_CVE2015_5119.yar		Loading commit data...
APT_Carbanak2.yar		Loading commit data...
APT_Careto.yar		Loading commit data...
APT_CheshireCat.yar		Loading commit data...
APT_Cloudduke.yar		Loading commit data...
APT_Codoso.yar		Loading commit data...
APT_Danti_svcmondr.yar		Loading commit data...
APT_DeputyDog_Fexel.yar		Loading commit data...
APT_Derusbi.yar		Loading commit data...
APT_Dubnium.yar		Loading commit data...
APT_Duqu2.yar		Loading commit data...
APT_Emissary.yar		Loading commit data...
APT_HackingTeam.yar		Loading commit data...
APT_Hellsing.yar		Loading commit data...
APT_Hikit.yar		Loading commit data...
APT_Hizor_RAT.yar		Loading commit data...
APT_Irontiger_Trendmicro.yar		Loading commit data...
APT_Kaba.yar		Loading commit data...
APT_Laudanum_Webshells.yar		Loading commit data...
APT_LotusBlossom.yar		Loading commit data...
APT_Minidionis.yar		Loading commit data...
APT_Mirage.yar		Loading commit data...
APT_Molerats.yar		Loading commit data...
APT_Mongall.yar		Loading commit data...
APT_NGO_wuaclt.yar		Loading commit data...
APT_OLE_JSRat.yar		Loading commit data...
APT_OPCleaver.yar		Loading commit data...
APT_Platinum.yar		Loading commit data...
APT_Poseidon_Group.yar		Loading commit data...
APT_Prikormka.yar		Loading commit data...
APT_Regin.yar		Loading commit data...
APT_Ruag.yar		Loading commit data...
APT_Seaduke_Unit42.yar		Loading commit data...
APT_ShimRat.yar		Loading commit data...
APT_Sofacy_Fysbis.yar		Loading commit data...
APT_Sofacy_jun16.yar		Loading commit data...
APT_Sofacy_xtunnel_bundestag.yar		Loading commit data...
APT_Sphinx_Moth.yar		Loading commit data...
APT_Terracota.yar		Loading commit data...
APT_Terracota_Liudoor.yar		Loading commit data...
APT_TidePool.yar		Loading commit data...
APT_Turla_RUAG.yar		Loading commit data...
APT_UP007_SLServer.yar		Loading commit data...
APT_WildNeutron.yar		Loading commit data...
APT_Win_Pipcreat.yar		Loading commit data...
APT_Winnti.yar		Loading commit data...
APT_alienspy_RAT.yar		Loading commit data...
APT_backspace.yar		Loading commit data...
APT_bluetermite_emdivi.yar		Loading commit data...
APT_c16.yar		Loading commit data...
APT_indetectables_RAT.yar		Loading commit data...
APT_irontiger.yar		Loading commit data...
APT_korplug_fast.yar		Loading commit data...
APT_passthehashtoolkit.yar		Loading commit data...
APT_pcclient.yar		Loading commit data...
APT_putterpanda.yar		Loading commit data...
APT_quarkspwdump.yar		Loading commit data...
APT_threatgroup_3390.yar		Loading commit data...
APT_unit78020_malware.yar		Loading commit data...
APT_win32_dll_bergard_pgv_pvid_variant.yar		Loading commit data...
APT_win32_dll_rat_hiZorRAT.yar		Loading commit data...
Adwind_JAR_PACKA.yar		Loading commit data...
Adwind_JAR_PACKB.yar		Loading commit data...
Adzok_RAT.yar		Loading commit data...
Alina.yar		Loading commit data...
Andromeda.yar		Loading commit data...
Anthem_DeepPanda.yar		Loading commit data...
Athena.yar		Loading commit data...
Babar.yar		Loading commit data...
Backdoor_WinntiPharma.yar		Loading commit data...
Bangat.yar		Loading commit data...
BlackRev.yar		Loading commit data...
BlackShades.yar		Loading commit data...
BlackWorm.yar		Loading commit data...
Bolonyokte.yar		Loading commit data...
Boouset.yar		Loading commit data...
Bozok.yar		Loading commit data...
Bublik_downloader.yar		Loading commit data...
CAP_HookExKeylogger.yar		Loading commit data...
CAP_Win32Inet.yara		Loading commit data...
CRIME_Shifu_trojan.yar		Loading commit data...
Casper.yar		Loading commit data...
Cerberus.yar		Loading commit data...
Chicken.yar		Loading commit data...
Citadel.yar		Loading commit data...
Cookies.yar		Loading commit data...
CorkowDLL.yar		Loading commit data...
Crime_Fareit.yar		Loading commit data...
Crimson_RAT.yar		Loading commit data...
Crypren_ransomware		Loading commit data...
Crypren_ransomware.yar		Loading commit data...
CyberGate.yar		Loading commit data...
Cythosia.yar		Loading commit data...
DDoSTf.yar		Loading commit data...
DRIDEX_phish_gina_dec15.yar		Loading commit data...
DarkComet.yar		Loading commit data...
Derkziel_Stealer.yar		Loading commit data...
Dexter.yar		Loading commit data...
DiamondFox.yar		Loading commit data...
DirtJumper.yar		Loading commit data...
Dridex.yar		Loading commit data...
ELF_Linux_Torte.yar		Loading commit data...
EXPERIMENTAL_Beef_Hooked.yar		Loading commit data...
EXPERIMENTAL_Beef_pretty_theft.yar		Loading commit data...
Enfal.yar		Loading commit data...
Equation.yar		Loading commit data...
Exploit_CVE_2015_2426.yar		Loading commit data...
Ezcob.yar		Loading commit data...
F0xy.yar		Loading commit data...
FakeM.yar		Loading commit data...
FastPOS.yar		Loading commit data...
FinSpy.yar		Loading commit data...
FiveEyes.yar		Loading commit data...
FlyingKitten.yar		Loading commit data...
Gamarue.yar		Loading commit data...
Gen_powerkatz.yar		Loading commit data...
Genome.yar		Loading commit data...
Gh0st.yar		Loading commit data...
Gholee.yar		Loading commit data...
GlassRAT.yar		Loading commit data...
Glasses.yar		Loading commit data...
Gozi_Family.yar		Loading commit data...
Grozlex.yar		Loading commit data...
Havex.yar		Loading commit data...
Havex_Memdump.yar		Loading commit data...
Hsdfihdf_banking_malware.yar		Loading commit data...
IMuler.yar		Loading commit data...
Install11.yar		Loading commit data...
Intel_Virtualization.yar		Loading commit data...
KINS.yar		Loading commit data...
Kelihos.yar		Loading commit data...
KeyBoy.yar		Loading commit data...
LURK0.yar		Loading commit data...
LURK0_CCTV0.yar		Loading commit data...
Lenovo_superfish.yar		Loading commit data...
Leverage.yar		Loading commit data...
LinuxMoose.yar		Loading commit data...
LostDoor.yar		Loading commit data...
LuckyCat.yar		Loading commit data...
MW_Ransomware_777.yar		Loading commit data...
MW_elknot_xor.yar		Loading commit data...
MacControl.yar		Loading commit data...
Madness.yar		Loading commit data...
Mailers.yar		Loading commit data...
Meterpreter_Reverse_Tcp.yar		Loading commit data...
Miancha.yar		Loading commit data...
MiniAsp3_mem.yar		Loading commit data...
Miscelanea.yar		Loading commit data...
Miscelanea_Linux.yar		Loading commit data...
Miscelanea_RTF.yar		Loading commit data...
NSFree.yar		Loading commit data...
Naikon.yar		Loading commit data...
NetTraveler.yar		Loading commit data...
Njrat.yar		Loading commit data...
Notepad.yar		Loading commit data...
Olyx.yar		Loading commit data...
OpClandestineWolf.yar		Loading commit data...
Opcleaver.yar		Loading commit data...
Operation_Dust_storm.yar		Loading commit data...
Operation_Potao.yar		Loading commit data...
PE_File_pyinstaller.yar		Loading commit data...
POS.yar		Loading commit data...
POS_Easterjack.yar		Loading commit data...
POS_LogPOS.yar		Loading commit data...
POS_MalumPOS.yar		Loading commit data...
POS_bernhardPos.yar		Loading commit data...
PittyTiger.yar		Loading commit data...
PlugX.yar		Loading commit data...
PoisonIvy.yar		Loading commit data...
Pony.yar		Loading commit data...
PubSab.yar		Loading commit data...
Quarian.yar		Loading commit data...
RAT_Sakula.yar		Loading commit data...
RAT_Terminator.yar		Loading commit data...
RCS.yar		Loading commit data...
Ransom_DMALocker.yar		Loading commit data...
Ransom_TeslaCrypt.yar		Loading commit data...
Ransomware.yar		Loading commit data...
Ransomware_Locky.yar		Loading commit data...
Ransomware_Petya.yar		Loading commit data...
Ransomware_Petya_MS17_010		Loading commit data...
Regsubdat.yar		Loading commit data...
Retefe.yar		Loading commit data...
Rockloader.yar		Loading commit data...
Rooter.yar		Loading commit data...
Safenet.yar		Loading commit data...
Sayad.yar		Loading commit data...
Scarhikn.yar		Loading commit data...
Scieron.yar		Loading commit data...
ShadowTech.yar		Loading commit data...
Shamoon.yar		Loading commit data...
Skeleton.yar		Loading commit data...
Stealer.yar		Loading commit data...
Surtr.yar		Loading commit data...
T5000.yar		Loading commit data...
THOR_HackTools.yar		Loading commit data...
THOR_Webshells.yar		Loading commit data...
Tinba_Banking_Trojan.yar		Loading commit data...
TreasureHunt.yar		Loading commit data...
Trojan_Elex.yar		Loading commit data...
Trojan_Ponmocup.yar		Loading commit data...
Turla.yar		Loading commit data...
Urausy.yar		Loading commit data...
Vidgrab.yar		Loading commit data...
W32_NionSpy.yar		Loading commit data...
Wabot.yar		Loading commit data...
Warp.yar		Loading commit data...
Waterbug.yar		Loading commit data...
Wimmie.yar		Loading commit data...
Win32_Buzus_Softpulse.yar		Loading commit data...
WoolenGoldfish.yar		Loading commit data...
XOR_DDosv1.yar		Loading commit data...
Xtreme.yar		Loading commit data...
Yayih.yar		Loading commit data...
Zegost.yar		Loading commit data...
Zeus.yar		Loading commit data...
ZoxPNG.yar		Loading commit data...
backoff.yar		Loading commit data...
crime_upatre_oct15.yar		Loading commit data...
cxpid.yar		Loading commit data...
dubrute.yar		Loading commit data...
exploit_cve_2015_1701.yar		Loading commit data...
exploit_uac_elevators.yar		Loading commit data...
favorite.yar		Loading commit data...
general_cloaking.yar		Loading commit data...
generic_exe2hex_payload.yar		Loading commit data...
iexpl0ree.yar		Loading commit data...
inocnation.yar		Loading commit data...
jRAT.yar		Loading commit data...
js_obfuscator.yar		Loading commit data...
kraken_bot1.yar		Loading commit data...
mozart.yar		Loading commit data...
naspyupdate.yar		Loading commit data...
netwiredRC.yar		Loading commit data...
ponmocup_plugin_memory.yar		Loading commit data...
pyinstaller.yar		Loading commit data...
rovnix_downloader_sinkhole_check.yar		Loading commit data...
sqlite.yar		Loading commit data...
ssh_backdoor.yar		Loading commit data...
tedroo.yar		Loading commit data...
tox.yar		Loading commit data...
windigo-onimiki.yar		Loading commit data...
wineggdrop.yar		Loading commit data...
xDedic_marketplace.yar		Loading commit data...
xRAT.yar		Loading commit data...
xRAT20.yar		Loading commit data...