Mirrors/reversinglabs-reversinglabs-yara-rules
1
0
Fork 0
mirror of https://github.com/reversinglabs/reversinglabs-yara-rules synced 2026-06-08 17:57:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added new YARA rules.

Browse Source
This commit is contained in:
Threat Analyst
2020-07-10 19:11:22 +02:00
parent f38190f1df
commit b95d1e6bee
132 changed files with 924 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
yara/infostealer/Win32.Infostealer.MultigrainPOS.yara
+7
View File
@@ -3,6 +3,13 @@ rule Win32_Infostealer_MultigrainPOS : tc_detection malicious
meta:
author = "ReversingLabs"
source = "ReversingLabs"
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
description = "Yara rule that detects MultigrainPOS infostealer."
tc_detection_type = "Infostealer"
tc_detection_name = "MultigrainPOS"
tc_detection_factor = 5
yara/infostealer/Win32.Infostealer.ProjectHookPOS.yara
+7
View File
@@ -3,6 +3,13 @@ rule Win32_Infostealer_ProjectHookPOS : tc_detection malicious
meta:
author = "ReversingLabs"
source = "ReversingLabs"
status = "RELEASED"
sharing = "TLP:WHITE"
category = "MALWARE"
description = "Yara rule that detects ProjectHookPOS infostealer."
tc_detection_type = "Infostealer"
tc_detection_name = "ProjectHookPOS"
tc_detection_factor = 5