{"schema":1,"release":"rules-20261018-39150886414","rules_root":"16d082395ef1ec53d0ad25d5840d83e7f5f3a75a283ce66f8fa75da106790ec5","count":1174,"validation_note":"compiled = accepted by the YARA compiler in the publishing workflow; it says nothing about detection quality or safety","category_note":"category is derived from the directory or file-name prefix, not from upstream metadata","platform_note":"platforms are inferred from markers in the rule text (file-format magic, module imports, paths); a heuristic, not upstream metadata","files":[{"path":"rules/community/antidebug_antivm/antidebug_antivm.yar","name":"antidebug_antivm.yar","category":"antidebug_antivm","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f3ee419817136b14253a1b9b1b1d0f36de7cb61b35539b2f9c643c102f0c701d","bytes":27570,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/crypto/crypto_signatures.yar","name":"crypto_signatures.yar","category":"crypto","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"886ffb7bff349189b4cfe6d7d702040f504d036fb02e66e2233e6554a9346145","bytes":76593,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/exploit_kits/EK_Angler.yar","name":"EK_Angler.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"fcdde8091f2d2147d708b35947a201562b9d96f99227f77d92f7a7d815e65ac6","bytes":10889,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/exploit_kits/EK_Blackhole.yar","name":"EK_Blackhole.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"958a17b96a15f4ae94df833d59aa2f3c8f7398d4cf5595c9792dfc38c3b348f2","bytes":14656,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/community/exploit_kits/EK_BleedingLife.yar","name":"EK_BleedingLife.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9755ceddc4e7ddbc9e4c71cb4b25c7f8860684aced4862c134207731d8b71040","bytes":3401,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/community/exploit_kits/EK_Crimepack.yar","name":"EK_Crimepack.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8fe8015c7ec432852beb04237bd2e307affe526ffdc2c334234d1b7baa0dac13","bytes":1349,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/exploit_kits/EK_Eleonore.yar","name":"EK_Eleonore.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"cd851398996df97b5d37f9fa6f1c9b55865ac9441b8ee92a2ca58f0672078628","bytes":4875,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/exploit_kits/EK_Fragus.yar","name":"EK_Fragus.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"95c765ba475c69733df9455d1d03a16b60d9ac44581a3403269f640c9ee5ad04","bytes":8455,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/exploit_kits/EK_Phoenix.yar","name":"EK_Phoenix.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"aa8928660ce5bf4ba0431ea80941863cf282976f2e147153af5e51faff2ffa36","bytes":17029,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/community/exploit_kits/EK_Sakura.yar","name":"EK_Sakura.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ba5ba950aabd8d3d2ac6fe0c2a1b0150c2f882fa41345717c96d5357583d9e01","bytes":2047,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/community/exploit_kits/EK_ZeroAcces.yar","name":"EK_ZeroAcces.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6b61a54f9a663aef48deea30c727bbebad2c0245a402d2235940801b50749a21","bytes":8675,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/exploit_kits/EK_Zerox88.yar","name":"EK_Zerox88.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d8c7616ac6f0f0e3f7a0e6f324a17225d76caa2a5a53f87cd8736b5e9ddf085e","bytes":1622,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/exploit_kits/EK_Zeus.yar","name":"EK_Zeus.yar","category":"exploit_kits","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c75dffda2c52661560a449c9f3d214b55adc81164a740e61f6153e9fbf9ddfa2","bytes":987,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/000_common_rules.yar","name":"000_common_rules.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6145806f134147792929b800639e57211f4ca78adabbc03204397b5ae1757bf8","bytes":1260,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/APT_APT1.yar","name":"APT_APT1.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"97c00fcb1316e1db68918f639b6f1acb5db0169afe3a6d472504d8868ec6d1d1","bytes":30589,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_APT10.yar","name":"APT_APT10.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"79651e3ef301da0db7b7ee58c3aa20a550a077b08a7f988789c21893e66c8056","bytes":4533,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_APT15.yar","name":"APT_APT15.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ff23fc0d15613011d3873684f16c11a2d583f2d883e63ef59f45df37df6c2ccb","bytes":7601,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_APT17.yar","name":"APT_APT17.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2c1aafa156de3efd19aa257d4af8830842f7276502a0f47c5bd45b8b906155de","bytes":1020,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_APT29_Grizzly_Steppe.yar","name":"APT_APT29_Grizzly_Steppe.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a45225aaded3662ad50c53cb2eb8780e8446e58d5fed866ceaca7082b8770b8c","bytes":3441,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_APT3102.yar","name":"APT_APT3102.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9651001fc3ba8ed57eac7a4af96020755e855df566902ad2726e791cbcb22203","bytes":829,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_APT9002.yar","name":"APT_APT9002.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"fdb222c6cbc06db4b5b02a7d61f48caf8a2411d486a7613a189497b96322db9b","bytes":1658,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Backspace.yar","name":"APT_Backspace.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"59334ef2857c5982f6f06eaf200900875b12e49df1e8b5e41aac0bfab8a8ca11","bytes":672,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Bestia.yar","name":"APT_Bestia.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1b5ae5ebad165385a2476e31dc8cb07ae06811a37a4463eae83f79107917395b","bytes":1231,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Blackenergy.yar","name":"APT_Blackenergy.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d981416ecd6e00b075f4d85c0b955a3df08492a74c456ae30d6d79f27a1b962e","bytes":8179,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Bluetermite_Emdivi.yar","name":"APT_Bluetermite_Emdivi.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"24a84d10ce59b3412bf0727ede06d8f7d604c6ef7f73e5ed3cf006fb0c001659","bytes":5772,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_C16.yar","name":"APT_C16.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b0f57d083f1ef690aaf2fa497b91e3fd4c859657b28fd368ae21421729a9d647","bytes":4435,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Carbanak.yar","name":"APT_Carbanak.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9731352eaa871728bdd6408ef2eb8cc2472749626a9c3b89d0890ddf217a555f","bytes":2135,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Careto.yar","name":"APT_Careto.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"89871765b9a13c9d1b0498baa61b050c4af69db065a4b7bab7ee90975dc019bb","bytes":2080,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS"]},{"path":"rules/community/malware/APT_Casper.yar","name":"APT_Casper.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"16f0c0f52aebd46915aec1ee29281b313be1ab1eff6e7d9e486f1caf2deea3a7","bytes":3741,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_CheshireCat.yar","name":"APT_CheshireCat.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f532151699ffc9e15062757e39f3ae150fbd5aedb199ce41b086af45f4a58a97","bytes":4748,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Cloudduke.yar","name":"APT_Cloudduke.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ecfadf49dcbd0c73b35aab1f9b8c44af3dd5a008f744b8bb704bd55c6c69771e","bytes":3219,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Cobalt.yar","name":"APT_Cobalt.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1e19b43a0b61489d90285d6822a23e06cf63cdf7ad1cf5660dc56786323c6d66","bytes":705,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Codoso.yar","name":"APT_Codoso.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6c29e56d07715736201fc350792969c157f37275f360ccadb8fa728f839d0039","bytes":15806,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_CrashOverride.yar","name":"APT_CrashOverride.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"133fb52a8bd2160fac038ebd0e99de2c1f42dc772be54b1a48814e52baa3652f","bytes":5526,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_DPRK_ROKRAT.yar","name":"APT_DPRK_ROKRAT.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8ff2036f8cc2b16af2f6d93319cab48bc483e00cff50e10165f4e4f3e82a98d1","bytes":3050,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_DeepPanda_Anthem.yar","name":"APT_DeepPanda_Anthem.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2bdf1a678830ad3a4455d44872e86ec46ff07ab6a6d02728a3aa7dfe67f4b7c3","bytes":4378,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_DeputyDog.yar","name":"APT_DeputyDog.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"864cbb7572fbea94cddbf5b9ccf29557d26acbc84a382ef1d9439d8247a45002","bytes":1170,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Derusbi.yar","name":"APT_Derusbi.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f49c1efa3d538a4d51334c15ae0fc8f74a20d02d011b02dc64d6268569485436","bytes":11373,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/community/malware/APT_Dubnium.yar","name":"APT_Dubnium.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"006e852a7c5e662020f00bce4fecaa99dfbb7c6dfa7d195f407e92f4760d04f3","bytes":6414,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Duqu2.yar","name":"APT_Duqu2.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"582fb9237479282087fc0bc7ad8ba731a50634908f14ce68b40150188a77e67f","bytes":6313,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_EQUATIONGRP.yar","name":"APT_EQUATIONGRP.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f3cbbd2702a0acda606204ca2be76ac99c1aba9e1bd82190449e6a1d4c477fa3","bytes":51851,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/community/malware/APT_Emissary.yar","name":"APT_Emissary.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0593144afffbc542a187dc76c75de25e4fa00723a200cb4f789784cb29b8bd8d","bytes":2352,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_EnergeticBear_backdoored_ssh.yar","name":"APT_EnergeticBear_backdoored_ssh.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"96620fac4427983797beff0709c6978bfa81f8bf8834e56dcdc3f2fcab06a456","bytes":299,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/APT_Equation.yar","name":"APT_Equation.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e0ed134a77665daa9e9c6b8c11a49a086333f05e4a59856d19965aab149203fb","bytes":21700,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar","name":"APT_FVEY_ShadowBrokers_Jan17_Screen_Strings.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"836f9cc63656e017dc001c811a45374ef09c2bd4de72acd4ad852968625428df","bytes":1680,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_FiveEyes.yar","name":"APT_FiveEyes.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0f8a4ddd5803570f3df71a7bdb88a2366ae0cd30a714fecce9a6b31fcb1ee1c6","bytes":12003,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Grasshopper.yar","name":"APT_Grasshopper.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bcb016b17e8e4250d4642eb0d1e5ea94ccc4d012c0bd9c525ada566647830847","bytes":3045,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_Greenbug.yar","name":"APT_Greenbug.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bd0435a8b4e3c2edbf26c95a90fcc227c08759ff0d25094c947892efa2a3d8b0","bytes":4946,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Grizzlybear_uscert.yar","name":"APT_Grizzlybear_uscert.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"47d77d94f487d4b911cc36b8f52f4e8a5c07d6e8181b2ee89418015f294440fe","bytes":76593,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_HackingTeam.yar","name":"APT_HackingTeam.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"48494682744a976340ae5943dc1d6ec6335f5eb5b52c1c0d683a04164797efe4","bytes":5778,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Hellsing.yar","name":"APT_Hellsing.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"aa38822b54e637d25b0fd532257c7193dfcd643a4d42ede64ffd0883a50e5210","bytes":5543,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_HiddenCobra.yar","name":"APT_HiddenCobra.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bb3fd0fa8d2ba609d8c65857ed178f42daff49671491a239ab0ecd228c9e1d12","bytes":7065,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Hikit.yar","name":"APT_Hikit.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"dbcf36632e1e8c6607e7e7176f848a251914cbbf0dd1428056a2aecd7434e06a","bytes":373,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Industroyer.yar","name":"APT_Industroyer.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d3c5b8b165b9746af7d1b9f0d8f065171dc415baf48e46a46f79c86c7e0af182","bytes":5601,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Irontiger.yar","name":"APT_Irontiger.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"45dede93bcf5aabb83bc3426da944ca7108433ee1d9f6b300c29f159af14ff0e","bytes":17808,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Kaba.yar","name":"APT_Kaba.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3177aff765fa545be7f83e5d8927ab7afeb68dd6739c8285af7e8d5de618eabf","bytes":930,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Ke3Chang_TidePool.yar","name":"APT_Ke3Chang_TidePool.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f65200bda6c3f5ebd51068333afc561197d1e9dc75725a79820d61b4dc546c7f","bytes":1556,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_KeyBoy.yar","name":"APT_KeyBoy.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8bd0f8ba6e175ca2b5d05c756c35f8e6dc16b9dd99dcc72876e49129f348a328","bytes":8116,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_LotusBlossom.yar","name":"APT_LotusBlossom.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7ae1df7bb218cf4d4261768b71cbfc205ddd8e68b0d97a216e1eae8c0b235608","bytes":537,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Minidionis.yar","name":"APT_Minidionis.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"cff87cefac0dc0ab5fbc12e0ac00f6b34ac57ebf69bf6aaf2372a5b3680a992b","bytes":3553,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Mirage.yar","name":"APT_Mirage.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1f8f7eec7fac3370eda18f485d780c30d130f85f8ed69d91cc3087b20bb0e0af","bytes":1085,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Molerats.yar","name":"APT_Molerats.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1dd404380726dfc882f0024d6e45f203d39544ae67cb7baf469dc1c8bc0a1402","bytes":803,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_Mongall.yar","name":"APT_Mongall.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"de6c7811413b65fc39db53522d159f5ab691745ea60c1579e75c9262fd9e78a3","bytes":1503,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_MoonlightMaze.yar","name":"APT_MoonlightMaze.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9b4c6cbaf86d56930982656011649c5fde51621637f6dd480162ad6eea7166f1","bytes":6684,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/APT_NGO.yar","name":"APT_NGO.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ae2fc4add2eab5836560f16da301c8a9e691cf036f4db64f1ad6e4c2d3179d75","bytes":1175,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_OPCleaver.yar","name":"APT_OPCleaver.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"14b4f83c8685835e46702f3cd90447735af788e8adf17c0eacd40f496816a65d","bytes":14857,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Oilrig.yar","name":"APT_Oilrig.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9a99f2a4fea7b47b14104b69958125bf5bf1f2060ee314c12bb3ab788b5be595","bytes":8636,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_OpClandestineWolf.yar","name":"APT_OpClandestineWolf.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"05ee95ad4a4b305204a691baa2a2de5dc4aa96691dd3e516011f2055103bc682","bytes":2154,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_OpDustStorm.yar","name":"APT_OpDustStorm.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8de0d5cfbc2c373892d5323cea641113712e106afd6791bb0acf33ab2db701be","bytes":5520,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_OpPotao.yar","name":"APT_OpPotao.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0614c8b9a771007ab969df209ae5347caaad6a0c28a6a26bce61822c0f1215f3","bytes":4750,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_PCclient.yar","name":"APT_PCclient.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c1f4bb73956251c26517eb7ec47b76a0a3b64fc19383adbfd8fee1cd876e8e34","bytes":960,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Passcv.yar","name":"APT_Passcv.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"67c021d9adf25c579e0f8f5f495e03223f7e1d6b5ebbbfefce07a010767d70da","bytes":6502,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Pipcreat.yar","name":"APT_Pipcreat.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"083dceb4189b74eb0ab2379c74fb1883cc5edd5969421f1bf724921cc96f945c","bytes":906,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_Platinum.yar","name":"APT_Platinum.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"338d7f4609ecc4bbc9a4575d27379671acc0e9a12c121d50b82b459d05dcec30","bytes":11897,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_Poseidon_Group.yar","name":"APT_Poseidon_Group.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0a6bdb39cd45a7d409bfdf8a6272710cc7a894955eb7a5ebaa3c156168db6ac0","bytes":4117,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Prikormka.yar","name":"APT_Prikormka.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f2c604b13424167649f96263ca53f4c6abebe079f8760bcc92146626e77593cc","bytes":5277,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_PutterPanda.yar","name":"APT_PutterPanda.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"87f0000d9d56ab06a29bbac4dfc95e1795def1170a8912b84cf40b350f79131b","bytes":16054,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_RedLeaves.yar","name":"APT_RedLeaves.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9d83f263264fa0a6684d5b82c2b8c409868f477e8849b79340b6d3c33e4a6c95","bytes":1386,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Regin.yar","name":"APT_Regin.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"cee8ac93137eb7398ea9d0bb6858281656d548a4c534b8b25715a8c8cd3692ca","bytes":16310,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_RemSec.yar","name":"APT_RemSec.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a91333f9e5e126b106b75e439f5e9a9d8d36eb12aa366f64b4f706edae3354e1","bytes":1638,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_Sauron.yar","name":"APT_Sauron.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7fde25fa3429ee0c2e8908f3d76ddc4399d33eeac4c98219b1efa442517d9e3c","bytes":4756,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Sauron_extras.yar","name":"APT_Sauron_extras.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"357b3986c560f70af2baf18ba84f32c1ae50d257f70e7dc67d20a386227798b7","bytes":8816,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Scarab_Scieron.yar","name":"APT_Scarab_Scieron.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a8736d2a6c26f7281982a7f5495056216afe6727093910b2115f8ede173077eb","bytes":1510,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Seaduke.yar","name":"APT_Seaduke.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4c569b8ab2b5220647669b5ee8bccbeb1eb9a43ce9798c10787b0de5447807f5","bytes":967,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Shamoon_StoneDrill.yar","name":"APT_Shamoon_StoneDrill.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"379f4b0205c4a1b420e845ccd59179d2b788d1af38be502d17c797165ee77751","bytes":1733,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Snowglobe_Babar.yar","name":"APT_Snowglobe_Babar.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b1889520d6096aded65edd7bf7ed722cbc90afacb2904eb8941d72e4e1829224","bytes":1576,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Sofacy_Bundestag.yar","name":"APT_Sofacy_Bundestag.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a1d9b148b3d2965157bd6c73a412deeed67779e6583792652133644ced8e6386","bytes":4002,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Sofacy_Fysbis.yar","name":"APT_Sofacy_Fysbis.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"359ecb67d542e6a6bd742158435b91434693615720a546bf067cf122ccf6bb52","bytes":2433,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/APT_Sofacy_Jun16.yar","name":"APT_Sofacy_Jun16.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"535a79b833dbaaa76dab59dd9201aa10f7960c7fbb9d7b37182a317a0bbb5fb0","bytes":2183,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Sphinx_Moth.yar","name":"APT_Sphinx_Moth.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"033937e12b368af102d672380c2a8687659d17a1bedc3a478e6fdb512effb0e3","bytes":5065,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Stuxnet.yar","name":"APT_Stuxnet.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"365cd368aad5c788a187d2e70ea369a075bef2ff8382503d2dde99ad4669d95c","bytes":9101,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Terracota.yar","name":"APT_Terracota.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"36f142868111b0bbf3d92ab59c9f0730215f59c38819cfb4c2e639d2fc42cfb6","bytes":5038,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_ThreatGroup3390.yar","name":"APT_ThreatGroup3390.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a52b83c83bf266d5feedac27b006680fd2214123ae16dfcda65290f284cef867","bytes":13176,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_TradeSecret.yar","name":"APT_TradeSecret.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7a333cbd2286e1c80bb1ad29964ae3bd4c70f1ded4c9d517bc82eda376de8aed","bytes":1052,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_Turla_Neuron.yar","name":"APT_Turla_Neuron.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"21d7d3352454d76176a790711dba7526e4f4959ca26e0f0a0feb531b36ec0df6","bytes":2144,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Turla_RUAG.yar","name":"APT_Turla_RUAG.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0739ae6c2d80523bfd41cc8308edef0618ae2aaeba29f1b8e683a83e4549fe55","bytes":11116,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_UP007_SLServer.yar","name":"APT_UP007_SLServer.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3ae2ed618910840741cde8fd5d99cc4fc1c277723b7cdbd1ec5a4ccc0a2bfa0e","bytes":4530,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Unit78020.yar","name":"APT_Unit78020.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"5c3178de6c00ee7d7a2fe127245b84eab83304ae47eefb58e663b67b8a99ee2c","bytes":6278,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_Uppercut.yar","name":"APT_Uppercut.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bc9e902833d56a02b895ab8d5342742346248854b0ceb606821b0fbc20fade03","bytes":842,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_Waterbug.yar","name":"APT_Waterbug.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4286427ecf6fa6583ffea2fed03bf793dc9e5e2d491f59845564a0b2dbbb3e65","bytes":4484,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_WildNeutron.yar","name":"APT_WildNeutron.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c7964cd9e6fcaebbf9e2c15d573c010923c661899164a8ed76ad85d9a7b57211","bytes":19377,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/community/malware/APT_Windigo_Onimiki.yar","name":"APT_Windigo_Onimiki.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b3c035513aca9dd6e79f0554a04ff6b15103ec329be75124133332e01b93878b","bytes":2825,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/APT_Winnti.yar","name":"APT_Winnti.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0441ae6ed097249645576a6fba8ca4346c13f118b64958b57874b23f2af2b3cf","bytes":6578,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_WoolenGoldfish.yar","name":"APT_WoolenGoldfish.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9e19a3c1b3a1707f1dc53ba06828bebbc1097ee07a7344214954423b961f5540","bytes":3859,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_eqgrp_apr17.yar","name":"APT_eqgrp_apr17.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f00e00d074f37ade5df426d63bc161179d8be3814f4080d6faedb591aeba861c","bytes":145297,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","Android/Java"]},{"path":"rules/community/malware/APT_fancybear_dnc.yar","name":"APT_fancybear_dnc.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"75d4cb004ea6216733ede514631b2611fc0ac327758f5fa7237541fb27199cc0","bytes":1304,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/APT_fancybear_downdelph.yar","name":"APT_fancybear_downdelph.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b47341c5302cda42a82faf7e827c9808c902b16cc5824d4bbbbe94d76f45383a","bytes":732,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/APT_furtim.yar","name":"APT_furtim.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"95e4e500928800926a7dca682e94ecdd37318d7920b3828bfe37e3f84aa94679","bytes":1691,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/EXPERIMENTAL_Beef.yar","name":"EXPERIMENTAL_Beef.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"22c34963da450cf7be5d11c177a973e505c3d5ad3ccad4865d5429a2d83541af","bytes":1705,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/GEN_PowerShell.yar","name":"GEN_PowerShell.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4943585b0c5da6a3dfdc038ecb74ba89912dbcf8c0e41798db633be9e2a0f384","bytes":852,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_ATMPot.yar","name":"MALW_ATMPot.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"089651f1b0d1d707c376e7f585527fc85ee5a8ff416ba4e132b2016cc8d8130b","bytes":1383,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_ATM_HelloWorld.yar","name":"MALW_ATM_HelloWorld.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d56bed33f5a1d8db103ec2e5129bb0d478722293527cfd9714f60dc3262e1a8d","bytes":714,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_AgentTesla.yar","name":"MALW_AgentTesla.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e5bec864fbe50eb3cb4e36ef848ee0fed2a10140376358465f02525090381b40","bytes":828,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_AgentTesla_SMTP.yar","name":"MALW_AgentTesla_SMTP.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ac15f1b2f43db0417f9d9b9e419bd6b4dd4f81a2576bec183cd2a7bc917bcc6f","bytes":751,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_AlMashreq.yar","name":"MALW_AlMashreq.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"afe31069dd0a0f1898c0729adc186b90476ab858931f1a0dd20c129da26a08c7","bytes":1393,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Alina.yar","name":"MALW_Alina.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7a075348d914077815f4342d0dc0336be4a5e04e63ef089e93eab25948aeffea","bytes":453,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Andromeda.yar","name":"MALW_Andromeda.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ec3633375926755ae0ac1f18fd85698b60a191ab961650a9561890d57333f906","bytes":1707,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Arkei.yar","name":"MALW_Arkei.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3ebae7b8d1efd69ffbb7d3d3b7c285ed827f7226f0a3b6e009d7a35a57da4206","bytes":638,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Athena.yar","name":"MALW_Athena.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f2855a4460099fb71ae4e9c0c9b0999831e278ffcc3a0c1e7b0ed26b65a77824","bytes":3149,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Atmos.yar","name":"MALW_Atmos.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"90650969362cac257f0fc6346ccbfe8c72bbe1ff06cfc61788a9dac1781d34db","bytes":4512,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_BackdoorSSH.yar","name":"MALW_BackdoorSSH.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7b8d08f6e907407a4fb9d7dbb5c2a6fb3a41fdd85bb9a69fa42ebee8d8648d32","bytes":993,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Backoff.yar","name":"MALW_Backoff.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"03c25e3c05f274dedaf70a82ec24de66d0eaacd50541deff16baabf73f72c83c","bytes":543,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Bangat.yar","name":"MALW_Bangat.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"535db86c9df2dfb193f2f0dd8b27b1d1717eb55d40a89902cb9acfce19dcab25","bytes":1151,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Batel.yar","name":"MALW_Batel.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"625f411c9f6871b807adde8d58bba7322cd2eae3842c1a2a5e2e027fe2a54b4c","bytes":768,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_BlackRev.yar","name":"MALW_BlackRev.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"283d2f39353d510a9ccd2fcbfe99f13b40cf74a121bc7901548233f5b4907bc3","bytes":1000,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_BlackWorm.yar","name":"MALW_BlackWorm.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a5aaed3e268790d40142accdaff28e368aa5f7005db997b6e40f58c8b194215f","bytes":826,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Boouset.yar","name":"MALW_Boouset.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8fd27fe25c16488cbe8189db9ed00a4be0430f829a5cfbc7d83e471e88f4ec02","bytes":524,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Bublik.yar","name":"MALW_Bublik.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"509c0f3a2284f3242c75e1c8e31d2b4570ad2b759ba6d8fa189fdd5d366e850a","bytes":522,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Buzus_Softpulse.yar","name":"MALW_Buzus_Softpulse.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e3a753de153911375446b685377f532ee55792493012abb87fff45ba54e577d6","bytes":905,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_CAP_HookExKeylogger.yar","name":"MALW_CAP_HookExKeylogger.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"962d7904342ac4d9df103c3a3f2b3ea06f167035eb9bfc1b7aadb49b1f37a42d","bytes":546,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Chicken.yar","name":"MALW_Chicken.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"66b0a61525d51a2a9006284809a603308377b0d77ce48f66804b5c7bc38b4a65","bytes":1571,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_Citadel.yar","name":"MALW_Citadel.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"491e56268876f18a7533e7d76f1da58c0a248f6edb4699b53b1f6abe15242c34","bytes":1496,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Cloaking.yar","name":"MALW_Cloaking.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"189b31443bf59ae202ff30c412122ebffc9539aef6383c918e9eba56d02b4b2a","bytes":1807,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Cookies.yar","name":"MALW_Cookies.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"59948e133ad3391d76b4a2a4d7f3b9b4fee2cda5ce93b499ac6a11d20c17e3ad","bytes":1195,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Corkow.yar","name":"MALW_Corkow.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0238cc6fd23fc4061eefe59fc55fd0a1d480187999f5619c8fc9e26960ba3efe","bytes":799,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Cxpid.yar","name":"MALW_Cxpid.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3092b0819036a3d31aec3673636bb684c2f494433eb5adcb08310db84e82a99c","bytes":875,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Cythosia.yar","name":"MALW_Cythosia.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"fcb55a7a071445c9dc3a8688a864ad9b3cf434159c66e96370c950355079f8bf","bytes":497,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_DDoSTf.yar","name":"MALW_DDoSTf.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3950e183f7a13ef3320e755f00f34f3102f75a31b06475efe54faa6cc1dc4936","bytes":758,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Derkziel.yar","name":"MALW_Derkziel.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"083612f661193fb62506275d6a840ddf50f225ee52a583098aecdd93590fa7be","bytes":783,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Dexter.yar","name":"MALW_Dexter.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bb2605d5ce6b79a66762d937c4ec7e32b65e1dd1ee4d8291d61af32529d17299","bytes":1074,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/community/malware/MALW_DiamondFox.yar","name":"MALW_DiamondFox.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e236c80117e3240d5de25e4f7d436c42f4b6ffdae1e873aad213e7e9cde714a2","bytes":605,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_DirtJumper.yar","name":"MALW_DirtJumper.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2026951ebc3cf430ddf4c8881e711df25ddb6d6289f20a0312a8757464f02877","bytes":3187,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Eicar.yar","name":"MALW_Eicar.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1ba3175cebe28fc5d4d25c1caf604beda152766db268a3f159e4bf61c2eddf54","bytes":317,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Elex.yar","name":"MALW_Elex.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f08d0bcd69ec0b8ca97f3c94fa61051de3a4e1ff9797194adeb35fd841a151ca","bytes":3213,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Elknot.yar","name":"MALW_Elknot.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d45eb67421553da114ffdc97a67bbacbd6525c140427f6cb7f2af71ad2a511a0","bytes":2365,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Emotet.yar","name":"MALW_Emotet.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9a0749387089c47ad48f90d6284bc432876751bf07a86224a8899624ff7dc16c","bytes":521,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Empire.yar","name":"MALW_Empire.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"969616bb9ed1427497bbe783d8386455c017351f727645334befa4c1296421b5","bytes":24394,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Enfal.yar","name":"MALW_Enfal.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"94cb13236b249b8376ad6bd9ce349485542cc909bc51493c3d491ed439037ef2","bytes":4158,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Exploit_UAC_Elevators.yar","name":"MALW_Exploit_UAC_Elevators.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d6c716f9e86abe729a0732c632e2a7fc2b52f2b767460d4a39290d0c41b14c6b","bytes":4979,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Ezcob.yar","name":"MALW_Ezcob.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ecbf37b36f593ca6a067014befb43733e490919b32c5ea3ca68cc77e855cc3e3","bytes":900,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_F0xy.yar","name":"MALW_F0xy.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1b18b9ecdfd242a9b51aaf1fad3b053ecc5b0938d50da583ab3226a54ad0d9f6","bytes":484,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_FALLCHILL.yar","name":"MALW_FALLCHILL.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2a22ceb42f437c0c18e8f49fdbd398b349c0f17601159e85216c9801893d6e4f","bytes":789,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_FUDCrypt.yar","name":"MALW_FUDCrypt.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"abcb6bae4f602dafdb9c6cc926123ddeb9ba8cfc62f81b4e65e3d9f1540cdd7c","bytes":1075,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_FakeM.yar","name":"MALW_FakeM.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9aa43ae27c81ae8df97ded7fec78b52e2da83a8d2087c5a80b5b3c7a24ab62a9","bytes":2437,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Fareit.yar","name":"MALW_Fareit.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6a8cdc84cb8e9b6eff4dc850ed607db879f7061a5bb0abc88f56d367d07eb145","bytes":1183,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Favorite.yar","name":"MALW_Favorite.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"342ee4ac74184af3cb6400c372248289e3ff0e9cd76c9c68ac8e7997dbc89b87","bytes":1041,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Furtim.yar","name":"MALW_Furtim.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"fa3d7920bb1a82d95cfa83d2f655d02d5c459416f9eb116a88d6d21a0c7c91f5","bytes":105113,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Gafgyt.yar","name":"MALW_Gafgyt.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7f270b7f32d3394799b82d241736b2056e1779970509cd2e72740e7ad9e44e2d","bytes":2799,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_Genome.yar","name":"MALW_Genome.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d87d23f162a9f01a359e64bd4ae9f18195079ebdfce701d4f2b67c1aee84cb02","bytes":580,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Glasses.yar","name":"MALW_Glasses.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7537ea028874273d3f1cc15862a844edf0d1a3ae4aeb1eaa25f627b22542ffa4","bytes":1777,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Gozi.yar","name":"MALW_Gozi.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4ba5ea882d4f7c4d68185d0347e9ea681c6b5ac6733755863c228836f5922edc","bytes":594,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Grozlex.yar","name":"MALW_Grozlex.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"03f79f28798ce5886a77199080330b2c61c0c2b1ca4e2d02a4f31917b3255516","bytes":521,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Hajime.yar","name":"MALW_Hajime.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"97862a22ca4e48de5b6aa13fa45df96e9b76a78e40d2cbb18ca58f5be00e7139","bytes":3357,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_Hsdfihdf_banking.yar","name":"MALW_Hsdfihdf_banking.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6698b1e194b5e728d091dea4054d06baf2a70ea74dcd2f0efc9a4d0b879c2deb","bytes":1114,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Httpsd_ELF.yar","name":"MALW_Httpsd_ELF.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a9f62f4a69e6ba900ad452d4fd670c5965c0e091f5c27b2a8854fe0fe0adaad3","bytes":2622,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_IMuler.yar","name":"MALW_IMuler.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8e753ced2a8c2ab8bc60b13e9768d463f4c98a7b2c176e3a49f16e96b46573c8","bytes":1857,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_IcedID.yar","name":"MALW_IcedID.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d7e4d89402fa4b88246cb56ead8f0ca55c9f4499fd36942e85513c9dac8fba90","bytes":1272,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Iexpl0ree.yar","name":"MALW_Iexpl0ree.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"504d31c114ea72f35506186c29661f74cc7500dec45f3e3671151b841f68fe7b","bytes":1894,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Install11.yar","name":"MALW_Install11.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c968dac993842b2ad9eab3cd107948e0478193585cb2bd172b8eec782c286df7","bytes":1134,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Intel_Virtualization.yar","name":"MALW_Intel_Virtualization.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a209b4b884aade34fce0a97eaf16d7fb844a4510f3757824eeabfd6618f747e0","bytes":1241,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_IotReaper.yar","name":"MALW_IotReaper.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"219f4439f4c79b4409b8168f3f72430e52be82f620c3589d9e1d15b8976a1773","bytes":401,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_Jolob_Backdoor.yar","name":"MALW_Jolob_Backdoor.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"39b4c399f9c8eb973b39370fa77645cbd170f4c51d412c7fb05415174f4bb3bb","bytes":1127,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_KINS.yar","name":"MALW_KINS.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"5dee88d61c6f4af12a3b24cebeece9328c1dbb5b279ae75b0c68f0b67461d9d2","bytes":1709,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Kelihos.yar","name":"MALW_Kelihos.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"006dbde351da0be32d445dfcf761a281353ce018c810c9b43c395ee10fcf465e","bytes":996,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_KeyBase.yar","name":"MALW_KeyBase.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d04b20b99a4ae52984423d40364542fd536cfd72b05f6fb1aa241db8f841dc6e","bytes":698,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Korlia.yar","name":"MALW_Korlia.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7602fd54bd5e9753ad49bf438dac7e44e32fc6ab5f87cf7afdf01648b7c2a9d6","bytes":1754,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Korplug.yar","name":"MALW_Korplug.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"68d69eaae145ee432a09032fac912bcf10d108180b44599d12f59c7806122821","bytes":1714,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Kovter.yar","name":"MALW_Kovter.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"be52c6dfc32bca78c7012904cb76eeb9bac1f2ede47712f75b1b3221c652a5b7","bytes":1067,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Kraken.yar","name":"MALW_Kraken.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"616f315130c4622174346c6051cc1d22f0e0e9653b10bb02c2a67fa3d00699fe","bytes":802,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Kwampirs.yar","name":"MALW_Kwampirs.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"5acea364d4ecf00e305beba4b3c9afb6e4caad9e48e44d37ff14dd8d41e738d1","bytes":2589,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_LURK0.yar","name":"MALW_LURK0.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f00b33db69d1b6ed910ab1ee3c268ee0b699f1c3573fbc74ad29b31b2ede7bd7","bytes":1934,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Lateral_Movement.yar","name":"MALW_Lateral_Movement.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"70770ec8d31ae814947760080a1a1eed0696914a53df3a7ee1fc6706b1d84ffe","bytes":780,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Lenovo_Superfish.yar","name":"MALW_Lenovo_Superfish.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3bb8b034ad69bdf6b997fdab75b73241687b5603b1a3a277bbc0a58370d2f17f","bytes":1103,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_LinuxBew.yar","name":"MALW_LinuxBew.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e3395bba271543d983051db7944270ca568b56143a64051045d239f8003d214e","bytes":379,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_LinuxHelios.yar","name":"MALW_LinuxHelios.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"fc9f1620692e2d2024d61b7ec85ca21a5d4ec8cdc3b344bf9c3bc99b3f291240","bytes":389,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_LinuxMoose.yar","name":"MALW_LinuxMoose.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3b1dce27b85a2a1c887869e740719bfacef637fac7f0e0f5573c4c8c36970eea","bytes":2863,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_LostDoor.yar","name":"MALW_LostDoor.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"09d721b03fd22bcb13c38a7fe9f1b9a9a5511d2ca624536e3140fc90231f6940","bytes":411,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_LuaBot.yar","name":"MALW_LuaBot.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b8b4ac1e19391936bab2e4a01613e4f11dcac2dc2129a9f4fb269b078f9620f9","bytes":703,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_LuckyCat.yar","name":"MALW_LuckyCat.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4a318a51330853cbf57dc614c980f62baee7e3226db8503a2e130a877ed617f9","bytes":652,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_MSILStealer.yar","name":"MALW_MSILStealer.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"587aaff8e7b4d969cc04dac2f66be0d44b208a528baeca8719c6939478a233d3","bytes":918,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_MacControl.yar","name":"MALW_MacControl.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9cc1040ca4e295880b833020776c785df9c7ab640b61dc52544b81e7a3998d1d","bytes":1552,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_MacGyver.yar","name":"MALW_MacGyver.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"cea73833e766a13957034306d798d164348d6d6ea441bc20c84d838f436a096b","bytes":2689,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Madness.yar","name":"MALW_Madness.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3eb598b7fcaa34fcf7f8bf7c02de31fa9c977efc49926dc9bdfbb0c468dd560d","bytes":999,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Magento_backend.yar","name":"MALW_Magento_backend.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bb865cb46e4c4c69595f220fc895c5d2cd702d3a7e133c52c4800f41dc9fdac2","bytes":8774,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Magento_frontend.yar","name":"MALW_Magento_frontend.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"433b2717ecdf917486020d4f0b70c5e8a1239ede9b82465dae07c35527b81617","bytes":3648,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Magento_suspicious.yar","name":"MALW_Magento_suspicious.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6affe43db5c309a0c9efe2b6540f526718154b6a07a3dd8c23ebdd3801c88122","bytes":2264,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Mailers.yar","name":"MALW_Mailers.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a4a6177578a2df6f80b6ee310830b02f6c0f281ff1e69b0a7743e04e7463afd2","bytes":1127,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_MedusaHTTP_2019.yar","name":"MALW_MedusaHTTP_2019.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"546af762ffc225da3197be3ee3900e0ac2f20464f8cc7c0c91c9f3aabcbd9783","bytes":1018,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Miancha.yar","name":"MALW_Miancha.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0880770c1a4e5561fcc5d83922b4448c4cc3efaeec5250c7b19d489f3d508caf","bytes":2135,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_MiniAsp3_mem.yar","name":"MALW_MiniAsp3_mem.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ec1410fbee02ad8f6045f4f088a0e8ecf94b1c70e83d92f82c1b170481024f65","bytes":581,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Mirai.yar","name":"MALW_Mirai.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"975a2913b57b527200b8f7398fc6a9ae18214a7ef36ea84be52ee05aa63fdcf3","bytes":9082,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/community/malware/MALW_Mirai_Okiru_ELF.yar","name":"MALW_Mirai_Okiru_ELF.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ab37b20e3bb509fc850defa4d904cca3f3b65357c643fa3b7356d9c572d90099","bytes":828,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_Mirai_Satori_ELF.yar","name":"MALW_Mirai_Satori_ELF.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"652822ad04477fba930c6d19c5994ef5c9ba2527db3a9a971c89f6ab1ce9952f","bytes":1052,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_Miscelanea.yar","name":"MALW_Miscelanea.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0b0d838bfaf6eb55cd7824eb2974f9b8c46f714ca453b686a2f197f2e6c7df40","bytes":20658,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Miscelanea_Linux.yar","name":"MALW_Miscelanea_Linux.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d4a9ffe4b3b78a80936959fb242d1cc995b9d7b4a8d9dbe1dc53f5460844ad01","bytes":4417,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Monero_Miner_installer.yar","name":"MALW_Monero_Miner_installer.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"dba740cd77bac8b40986bc0111ce74d0993c1f5de5f9fa0efd1f296f1c90fd8e","bytes":821,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_NSFree.yar","name":"MALW_NSFree.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8486cc4bf9c6a2f8e6d0654fe77aee4137870d943d70bee20e4aee09c88a31fe","bytes":1172,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Naikon.yar","name":"MALW_Naikon.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"55a51bf93522b4945620d9231b33326cc070d21359ba8d00efee23215033fa6d","bytes":2497,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Naspyupdate.yar","name":"MALW_Naspyupdate.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d64329e905ec11f4351debd66b8c884184bf545dbe1393ad7f688a275e2657ae","bytes":1113,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_NetTraveler.yar","name":"MALW_NetTraveler.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"83e20c220451e96abe581842353f1374f825723b9b08a8c95ede553ec54bede6","bytes":2254,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_NionSpy.yar","name":"MALW_NionSpy.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a95ff17f4ede02d46e5a3f68c1064de37fb06f65408b2021a05f8f839a1f8a8d","bytes":681,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Notepad.yar","name":"MALW_Notepad.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"03814e09b4b916fdf9afeda4062a0b90a1e540ae9f8ef03073505aa0b90224e7","bytes":528,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_OSX_Leverage.yar","name":"MALW_OSX_Leverage.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"28b7ceee25f9614d79a0119689e7015783a1948b77e5575e3b61c7e752688e2f","bytes":904,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS"]},{"path":"rules/community/malware/MALW_Odinaff.yar","name":"MALW_Odinaff.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d8129a8f6e2e09be5aa136469a02e7f0cd45c027834b5c1f4c244849e6397e01","bytes":900,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Olyx.yar","name":"MALW_Olyx.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ced16fa2be1f762b5e079d6fc5cd4cf1a912a52037e700b221ed9b6703873579","bytes":1021,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS"]},{"path":"rules/community/malware/MALW_PE_sections.yar","name":"MALW_PE_sections.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9b92d4c4defa31219fcea829f81d7c2c9f58d87beafe25fce5bcab4ed63541d1","bytes":2957,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_PittyTiger.yar","name":"MALW_PittyTiger.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4e491ccceb83a51fd5af09d7a8bb8e5a06818ff95c6134f3c4943e1904c9ca4d","bytes":1050,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_PolishBankRat.yar","name":"MALW_PolishBankRat.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"096ad93dc0c4d6d3bff595b0fef2b06f8a2093409b9699f1f9f93da1f8adf612","bytes":1720,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Ponmocup.yar","name":"MALW_Ponmocup.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bdfd0d6d6032b0caddd0c25c874a6d3825ad9531686816a203c857cc66494a71","bytes":4034,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Pony.yar","name":"MALW_Pony.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ef83dd8260bbee0301fb065b751f6c6136ea55bed40dbc57d422c9f988651e44","bytes":786,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Predator.yar","name":"MALW_Predator.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e2ac5296b644e60d05aef39fc4e299f6efd45b4f141eb37cf35bdc7e5b611156","bytes":765,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_PubSab.yar","name":"MALW_PubSab.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8a37c0203f2cf13829439b65ee3e48fb3b290613399f6cb0d218883c1fc72559","bytes":1000,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS"]},{"path":"rules/community/malware/MALW_PurpleWave.yar","name":"MALW_PurpleWave.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"86f97656398ff87cebfcf95217c6d03297e711133f8d71cc5b81366a78061334","bytes":2856,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_PyPI.yar","name":"MALW_PyPI.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"54d21c84be37864ef99808d12c334df0fca658388443bdacbb7772d47e765d21","bytes":322,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Pyinstaller.yar","name":"MALW_Pyinstaller.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4bcfbe8f9f6ff77591d0b3d15162f6d6606fec937370c6f5dc974ddffc821c5e","bytes":533,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Pyinstaller_OSX.yar","name":"MALW_Pyinstaller_OSX.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"72fb0407c596e648d62602a521d60851badb26d7ec641bb51347272ffc643f93","bytes":484,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/community/malware/MALW_Quarian.yar","name":"MALW_Quarian.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f67f49953dce96ce2461d334d81938bd7110a872664387f59caac2976fa68897","bytes":2166,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Rebirth_Vulcan_ELF.yar","name":"MALW_Rebirth_Vulcan_ELF.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"712a6dfcb1ccacb685b555249ec38d3e0aeaffbf6fa4635e51152dce1e6f865a","bytes":2793,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_Regsubdat.yar","name":"MALW_Regsubdat.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"73102ed7952ffbc68794109a98677bb6ad1dbb9bc7dc2ff8aa1de22026ca4782","bytes":1278,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Rockloader.yar","name":"MALW_Rockloader.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"61c1ee83aeecb822407379e5890bf6ab828f566753cb9ecd81d763b239d9a7f3","bytes":847,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Rooter.yar","name":"MALW_Rooter.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"aa08749bf0e89479b3370d3f9f3f34cc138ee584060f6657c0f654c27c618bfa","bytes":2154,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Rovnix.yar","name":"MALW_Rovnix.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"dcecadfa6f4344f0772cf802a98e47c03fe589ed71c6cd8066c91bdfcf99c0e1","bytes":609,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Safenet.yar","name":"MALW_Safenet.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"31e255d9ce8e33b55df7a5065be1af3fd2f4733180aa7f714028e051fac99034","bytes":1123,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Sakurel.yar","name":"MALW_Sakurel.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"71104db7e1292e525bd3cc83ce6ba222bb3179c44b81c2027235e5553a566d2d","bytes":814,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Sayad.yar","name":"MALW_Sayad.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d86beefcef02924147a0d0634d2e3fb7f0c402cc37b243e670cb84b115d9b31e","bytes":2040,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Scarhikn.yar","name":"MALW_Scarhikn.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e80bcb0fbd67e09b226087cbd2f476ba7a8dcd535685187f7eeec249800286fe","bytes":1143,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Sendsafe.yar","name":"MALW_Sendsafe.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6d0b9073d6a94eb312f0ffbaad872ca567683efe31971570e7ac4e1bc93432df","bytes":1778,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Shamoon.yar","name":"MALW_Shamoon.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9d7a8472bcce2e9c840972bf16973f2bd2246ef2e8adc1d990b1448ee031e9b4","bytes":4028,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Shifu.yar","name":"MALW_Shifu.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a707a27c50f6362b082be880de32422a9647cc9ec751b0b2ddc881a8a569d0d9","bytes":3260,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Skeleton.yar","name":"MALW_Skeleton.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3e724a8864121b7362c37e3443b7838b6bb2a80c77b11d9dce8f3983f3a64345","bytes":2240,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Spora.yar","name":"MALW_Spora.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e8d2b563ead393c0c4f941256c7f1dcb7a5251160781e26fadd31e74a23ee5c0","bytes":1103,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Sqlite.yar","name":"MALW_Sqlite.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e1bc8ae9daa103f40820e10aa433581c523e55c5b6c9a41aa3e6736ec74a3ae4","bytes":499,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Stealer.yar","name":"MALW_Stealer.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7889e2be33fe6cc13f33dff8c9fd7cadb631a0c0aa47dcafb1bc480a8b2cc950","bytes":661,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Surtr.yar","name":"MALW_Surtr.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"dc4efa70d34ac9ba366ff81452d27c4f6d3fb53d8215d647404f2e42548a4a1b","bytes":2868,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_T5000.yar","name":"MALW_T5000.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f5d4d3345ccc56db34c8762753fd152bbe438d4b47be58f56a0b114b1561f654","bytes":1292,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_TRITON_HATMAN.yar","name":"MALW_TRITON_HATMAN.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8b6bf00460616160c3fb4320215f5388c893aff9277b0c29c6c8168c3020472c","bytes":3725,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_TRITON_ICS_FRAMEWORK.yar","name":"MALW_TRITON_ICS_FRAMEWORK.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c6f0dfc87c710ee98c502a93613534259eb64172d63b9935997863632d68642d","bytes":2831,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Tedroo.yar","name":"MALW_Tedroo.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"85dca0912a73ed946c46af4b4330e44ab11a7a3027501135463831879b188868","bytes":429,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Tinba.yar","name":"MALW_Tinba.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0b472cdcb0388f6ac3a9017d3977785d8397422b7ec2eb585917839128cbaa12","bytes":1234,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_TinyShell_Backdoor_gen.yar","name":"MALW_TinyShell_Backdoor_gen.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6e26c97f3539a532450c09d8b69b85d1aebfb342a6edcfdae3fe63b37e4f4fd0","bytes":3291,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux","macOS"]},{"path":"rules/community/malware/MALW_Torte_ELF.yar","name":"MALW_Torte_ELF.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"88a1c59a2ab3f9245748013e4b9cfb0406e3456f3fb423bf74dccd07ceafc1ba","bytes":1764,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/MALW_TreasureHunt.yar","name":"MALW_TreasureHunt.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"faf81e7ce4aedbe9319f20d6f775c4b54ce4e65570099f08f8b9c296b5fe1deb","bytes":587,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_TrickBot.yar","name":"MALW_TrickBot.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9235bb36aef960312119d742e23170b0fedcb156d74d2d0cf5e13dda1b02f8aa","bytes":1631,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Trumpbot.yar","name":"MALW_Trumpbot.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1925dd67fa6a922d700efd7f9f822cd88fa5daca62670a481f4a3d713db7f018","bytes":321,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Upatre.yar","name":"MALW_Upatre.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2d2b11b76be97a17ebbe86049e40c9bfd3f80c16ae68e1ecded9277021d822ce","bytes":2129,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Urausy.yar","name":"MALW_Urausy.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"014adac481856eb541a153b90c843fa5dd8454957df61ea812bbbd8fcbf381b9","bytes":618,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Vidgrab.yar","name":"MALW_Vidgrab.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8cf6f284b03d1049321e523bac3e2a7f76330de24d60ee0c4a484e0f61b551f4","bytes":1255,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Virut_FileInfector_UNK_VERSION.yar","name":"MALW_Virut_FileInfector_UNK_VERSION.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"10eb19b57d25bd8aca15f8141a840203f6749ed3ef9c006352e7619b551c10b8","bytes":629,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Volgmer.yar","name":"MALW_Volgmer.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c547a08fbb4e5a336b49c175ea46a20a76275eba8d15a249ef9141da1d292ae8","bytes":231,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Wabot.yar","name":"MALW_Wabot.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4525bdf5de71f11048f67ed34e370095fcc5ce9f6660278686a164ff432170d2","bytes":442,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Warp.yar","name":"MALW_Warp.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1e408f39a8d3016170d4a0a1684cba57e2ff358d5c2b1b120b5b519bada3c491","bytes":995,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Wimmie.yar","name":"MALW_Wimmie.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e27259c22d948e4b0be93fa76b6af0f5cf34c95a4ad4c0a4ecdaa379ad2e8ce4","bytes":1209,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_XHide.yar","name":"MALW_XHide.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a2ee63bd0464aa6094188d57eb462164a7febb2bd2839fcd557ce99f36db3f0b","bytes":342,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_XMRIG_Miner.yar","name":"MALW_XMRIG_Miner.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b4435b8a807db961088209b5e12efbd708bff64bc9db6e1349cf85a2e8a7e65c","bytes":166,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_XOR_DDos.yar","name":"MALW_XOR_DDos.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0034bf1a5c6118d1c6a8dddc5c07c9987184afbd6fa9c2686909233193cfadee","bytes":507,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Yayih.yar","name":"MALW_Yayih.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d3fdaa568a7d56965c20f22c73365476d7770b2eab14bde1bda621c07031d3ed","bytes":1036,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Yordanyan_ActiveAgent.yar","name":"MALW_Yordanyan_ActiveAgent.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"cbf4d02db34cf886c5af8089f70a51ce7c1fc51dccd9c79ca4bc8f87b376ec0e","bytes":1466,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_Zegost.yar","name":"MALW_Zegost.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"5c0d2280d761fff527ce9129a9cd6ae1cc74855970ddb732846705c354ca9cf4","bytes":510,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_Zeus.yar","name":"MALW_Zeus.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3b844477c7dbb97418edc4b5485df2d0e0f9e1119f73f99188ea6e36d4354cff","bytes":1015,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MALW_adwind_RAT.yar","name":"MALW_adwind_RAT.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d18e30a7d46521ad44755dbd3387ae85d469f3e76fcee93e42fa676bd552b16d","bytes":394,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/community/malware/MALW_hancitor.yar","name":"MALW_hancitor.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4d99a2992a41cc0bfa5152eb8e0a4e0bf8b09b1094b2c57587ca8d1e030c6794","bytes":858,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_kirbi_mimikatz.yar","name":"MALW_kirbi_mimikatz.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7c92dd473551746e87d3e7536ede7191b8afddac8d35468d05d9659cbf440cde","bytes":374,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_kpot.yar","name":"MALW_kpot.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d46a073a8ee203a58a232a0598dff959be6bf179691b04718e57a8726848ad09","bytes":1197,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_marap.yar","name":"MALW_marap.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c13f0374b61691e400234f658c37c6a4a734ad9851100a5518ffd5000ac6c8f5","bytes":1189,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_shifu_shiz.yar","name":"MALW_shifu_shiz.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ea5263d48ec1cfe11e43159ac987576ef53ab3f01840b64a1d9868515430e159","bytes":2248,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/community/malware/MALW_sitrof_fortis_scar.yar","name":"MALW_sitrof_fortis_scar.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"16cccd5b5fa4b147d47525b008698748ba5fbb5518dc042354b52abcea301896","bytes":649,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_viotto_keylogger.yar","name":"MALW_viotto_keylogger.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a6cad250175c25656057f7afa56df219b7d5eb2f73958b9ac3a649c5496bb1a7","bytes":383,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/MALW_xDedic_marketplace.yar","name":"MALW_xDedic_marketplace.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"295e2da855dec31e912373440595d6b53f609aee950c0de257ab727ef5e81626","bytes":1269,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/MalConfScan.yar","name":"MalConfScan.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"579a4f65a990ff0f2c1a8e19a332027bd3995607bfda187f674d621aa64f94d5","bytes":17569,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/DeltaCharlie.yara","name":"DeltaCharlie.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"fe97559b82b9b0f410c6c8973ddb8ddf8486e9e10a1c8b0fb0e87fd17c5d658a","bytes":562,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/HotelAlfa.yara","name":"HotelAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ecff9d37044ddc138d2cd71e6a3cead618cdcf2e054a821c8d4832b60c946712","bytes":802,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaAlfa.yara","name":"IndiaAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"dfdc0363440244bf771e6c57b159cebd98081b0852eea82444e261a3b037af5c","bytes":519,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaBravo.yara","name":"IndiaBravo.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"24d6ac8c444c180137aa6b8f9894c5f0a35438dff2b8f3d13842afc4b5452f94","bytes":3015,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaCharlie.yara","name":"IndiaCharlie.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6184b4236c54dba3f86d0032b905afd9e1138b77920c4b5ef1a787566ffd8964","bytes":916,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaDelta.yara","name":"IndiaDelta.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"47b5524aa071e42e155c10ae67a563fc6c0b70c70afd1bf334af5fc9d603620e","bytes":1086,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaEcho.yara","name":"IndiaEcho.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8904f450ebeb3258ff47854b726ebc602fd4a4b27b185d1b6a18275ebe594440","bytes":1468,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaGolf.yara","name":"IndiaGolf.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"958d15ca2e41a72adaeedc46660873385d16a2b90370535e3d5062eebc7fd109","bytes":1016,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaHotel.yara","name":"IndiaHotel.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"16db338e51d2781d46b18dc1ccb70e6d9c0e83f979636736a1144d3e6da7bf29","bytes":908,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaJuliett.yara","name":"IndiaJuliett.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"234372b3e6af5fe7a0c5eb5e48deef402ba97adc77363198e6912eb6612f08b6","bytes":3475,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/IndiaWhiskey.yara","name":"IndiaWhiskey.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d507dc7ca9e10b289ecb9eb2f2a0c8ccedd3668b114057441c3343b13ad99773","bytes":1562,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/KiloAlfa.yara","name":"KiloAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ad3bd1f8f2df082f303023e713bcf3785799538811edeac5d0228ce910f56f3d","bytes":4115,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/LimaAlfa.yara","name":"LimaAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1a24d517f2a0607f7065b4b56ede291b58fa35a9cdf6f95869c4792c943ce4b4","bytes":1038,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/LimaBravo.yara","name":"LimaBravo.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f615f00a357f7e20490004d3fc36bbea690b87a42573e0961e3dc1f38e4f74e9","bytes":843,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/LimaCharlie.yara","name":"LimaCharlie.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"235ba15e8ec7fb03245961399298e6b6a79bf060c3a449686ccb18ddeab32a15","bytes":1794,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/LimaDelta.yara","name":"LimaDelta.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6da0304653a599c56eecdac57b631adf5c67016113900144f4a064a0c92ff628","bytes":2048,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/PapaAlfa.yara","name":"PapaAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"75ef31c72ce1204bfa75098ebcfe49905b0f6686dd3ae8de74d3b8c0fa1d67a0","bytes":353,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoAlfa.yara","name":"RomeoAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0be520bd8cc0873666a0ab28806393343708ebb140e7de424dc064958c7faf64","bytes":1850,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoBravo.yara","name":"RomeoBravo.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3208eb1aafcc14f1f59166d0e6ce1ab027d0c74b2b8c4a344c21360b1ba76882","bytes":1388,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoCharlie.yara","name":"RomeoCharlie.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0672cd073e35420eee500e4b85fbca35d16eabd74391765f9fc347e062bbf032","bytes":2340,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoDelta.yara","name":"RomeoDelta.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e99bd20f196e47c3e01bd235c905e5f945aca5827156915dc5c66a70ffb666eb","bytes":1256,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoEcho.yara","name":"RomeoEcho.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e66cf1aed9f203cd028af3f5e1a526b5b25b833f9215e812c4b989171f107d16","bytes":288,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoFoxtrot_mod.yara","name":"RomeoFoxtrot_mod.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c053d903cde9a5282cbdbc939c09ce7bfac50246e053ccfbd9c464025dac9f20","bytes":3080,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoGolf_mod.yara","name":"RomeoGolf_mod.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"4360a0acab666b5e58f37ff0f3e6ee2671359c2224533db6d631ab8ee94a56e4","bytes":1463,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoHotel.yara","name":"RomeoHotel.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b495c708b74400473f98d618cc3308174860cca637f1f8d9aee3ba7f7867f3b6","bytes":1968,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/RomeoWhiskey.yara","name":"RomeoWhiskey.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2879b017c8b275b0360b6608c7e5332ff47d34630d22ff5fc6bd84249915c3d6","bytes":2315,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/SierraAlfa.yara","name":"SierraAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0022750beeb41783fad68a3f73d42846a962c9897a222e9d095c833a63f52d15","bytes":3628,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/SierraBravo.yara","name":"SierraBravo.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6f67864c63528d596e41b09c7a5c297de5107ec5e20d6a71b935e47127ffa1f0","bytes":4400,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/SierraCharlie.yara","name":"SierraCharlie.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b96156fe7cc59bb62f10a03e1cc41df5e95a99a555c553bc12702c9c1136da08","bytes":1001,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/SierraJuliettMikeOne.yara","name":"SierraJuliettMikeOne.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2c12d0d017fe9c4cdd00ee089efdbd705576645e484715dc9a97ab07b26f89ea","bytes":1761,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/SierraJuliettMikeTwo.yara","name":"SierraJuliettMikeTwo.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7c2f5b395cc26a2be7efbbef5929930d33f6eb48b7dfdbc9b274643ccf292c41","bytes":3414,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/TangoAlfa.yara","name":"TangoAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f1a8c8c00ec501c89a782dad2db6ed34a4f11bb881bcfe1f2fda003535c9b513","bytes":538,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/Operation_Blockbuster/TangoBravo.yara","name":"TangoBravo.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a9a0cc557795059afd10e049e5919c91370c555fe1fbf20a80d9b30e901d0298","bytes":1109,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/UniformAlfa.yara","name":"UniformAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"73b1d977914f10d3fdef65e109e42b7827e854444021d0c37e0443d20f77e1a8","bytes":1068,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/UniformJuliett.yara","name":"UniformJuliett.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c1f3cbea2f575908ae0bbbab4d00a5a30a2c67520f36bd10897d4ba8c94ee793","bytes":983,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/WhiskeyAlfa.yara","name":"WhiskeyAlfa.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a89bcd5af33a2d6e8dc427da6bf81000b56f8f9830f7052ac122cc0458b6c791","bytes":2326,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/WhiskeyBravo_mod.yara","name":"WhiskeyBravo_mod.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"5b9cb62a793ca16291bf3866768eba91d6ea4dccff3d12c9ec59ce752f6c11bc","bytes":2309,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/WhiskeyCharlie.yara","name":"WhiskeyCharlie.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"cefc589c1966d39450d306d0d36a29061c260b895617b478c0dd9958fee060e5","bytes":1749,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/WhiskeyDelta.yara","name":"WhiskeyDelta.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"45d80df5744f5080b7f3fe4b8856f7275a037279cb11807e64a374b48f23729e","bytes":1641,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/cert_wiper.yara","name":"cert_wiper.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d907d874bb397c59eedfdf87a1b4d1aab95aee2bc1d31faee88bf4ea316b2d60","bytes":10035,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/general.yara","name":"general.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"42806de5552bf833966878f9101595af412d6359fbfd10436f9321c492929721","bytes":1517,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/sharedcode.yara","name":"sharedcode.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7b76d4e522b7d61f2b4aeb788bd78c2d66de03c5f44af344921ba2c1044dd95f","bytes":12623,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/Operation_Blockbuster/suicidescripts.yara","name":"suicidescripts.yara","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d03064dbcf5789129c7cce2f75382314b30fe0cd918375d619b70bff209fe392","bytes":909,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/POS.yar","name":"POS.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6d69e666e9a6d9af981a7b8552081a71289323b72017484127373ab6676d122d","bytes":9362,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/POS_Bernhard.yar","name":"POS_Bernhard.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"74b064d5e4a850f367ad937cb2818cdbc6466ff17b1917f0066785f787a505ab","bytes":1389,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/POS_BruteforcingBot.yar","name":"POS_BruteforcingBot.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d02f14e307f01e9d6c5ffb80f5a0670015cc6ca6632246b156853df89f47a487","bytes":625,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/POS_Easterjack.yar","name":"POS_Easterjack.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2f53d034737e60774cb5d265228cc57d93ef3eea616dc0ce02c64e7f44a8aabe","bytes":524,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/POS_FastPOS.yar","name":"POS_FastPOS.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"89e95f9ba4b48b1f35334212dcf4984e6168578eb3d086d7cbdc20d2ff11aa1f","bytes":695,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/POS_LogPOS.yar","name":"POS_LogPOS.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ba4ed534910f7574be9bebe46a392c86c68cd891ebc67d1dc9e3420dc723a00d","bytes":816,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/POS_MalumPOS.yar","name":"POS_MalumPOS.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7e888a0f5b5caed65cff1327f21d8197e610a9ad64fd413ccc5ca110183aded5","bytes":726,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/POS_Mozart.yar","name":"POS_Mozart.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8affd7a36d411535d23436233ea7718b923770ca8b4a83304fd8ffe85d4b715a","bytes":1511,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_.CRYPTXXX.yar","name":"RANSOM_.CRYPTXXX.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ed383b514dbab40de2a13ad534bb9f34a22fec057cf690e80eb5b8b6051623fa","bytes":2799,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_777.yar","name":"RANSOM_777.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"89e2097ded8e7d07c1515edc6cfc909f83f7ab0d6533062d776c056386d14757","bytes":1036,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_Alpha.yar","name":"RANSOM_Alpha.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"07ba851db7741f1dcc239a178f5e57ab49aa439543deba63022e89c8d8a5fc82","bytes":747,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_BadRabbit.yar","name":"RANSOM_BadRabbit.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f80a2f4becbd2ac512eb7f4216bb6ea7a383a0637143d961f3f02064fbd0412a","bytes":1920,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Cerber.yar","name":"RANSOM_Cerber.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"93e1dc32941afd6b7febefc4283fdb951b0cd1e354f2cbbc0af6e8fd5a99c8ee","bytes":1362,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_Comodosec.yar","name":"RANSOM_Comodosec.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"dbd46e004c81863e6b4e4da91509fafcddb6a3d255ddfa890cf5ad974f4931f2","bytes":1703,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_Crypren.yar","name":"RANSOM_Crypren.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9627586a0d1cd9381b47f1e427c3266ca4b51c442968ce42ee12214a55818327","bytes":495,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_CryptoNar.yar","name":"RANSOM_CryptoNar.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3bc2f47ce1631655310308bdc675341196c8ac3364ceb51e2e22523dba7ea9ca","bytes":1614,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Cryptolocker.yar","name":"RANSOM_Cryptolocker.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"804728e62965ffed88514c457f543a21c1a11ad183e7d338b7a9e11fe924d47c","bytes":2588,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_DMALocker.yar","name":"RANSOM_DMALocker.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"30e789d2675c05ec1ab51b6f5522672e811b8b900f9e9701acb705820afb4c45","bytes":1054,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_DoublePulsar_Petya.yar","name":"RANSOM_DoublePulsar_Petya.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"99b9bba99a4e18bf9fbf2aae90ea01e616b39b44a931b3b33ad2dc897182ec34","bytes":1684,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_Erebus.yar","name":"RANSOM_Erebus.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2590c648d3a27b00d59522ef90f6aea3cf396ab19ba97c630d3c1acb4b2c21e6","bytes":493,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/RANSOM_GPGQwerty.yar","name":"RANSOM_GPGQwerty.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6abb8da5bda957658ae1beb109d5085458578d409a91223f693e1a40cbb3c55a","bytes":446,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_GoldenEye.yar","name":"RANSOM_GoldenEye.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d59627fed970647f6f5c0748abd5f74c9a72943a24fc0f62233c74cbd6c73338","bytes":1321,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Locky.yar","name":"RANSOM_Locky.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"eaf00a1660fa88b2d332caebad9a41110131b5fc8c232315b63421fa409ec580","bytes":1294,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_MS17-010_Wannacrypt.yar","name":"RANSOM_MS17-010_Wannacrypt.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"af98f947ff400fe76f0d2f919749fba5f278d7a6d19c0f34de6eeddd44e52f91","bytes":14792,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Maze.yar","name":"RANSOM_Maze.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2f8e17da6acc433d68af504ca6271f7d9ee7f8115bacd994adb1a68084d50db5","bytes":906,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_PetrWrap.yar","name":"RANSOM_PetrWrap.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3feacfbfb5e39c9e1f1f34410ea5b9ad453fa3631ad859775427bf399ebfc47f","bytes":1150,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Petya.yar","name":"RANSOM_Petya.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f6f6b241a676bfdfc595f4cc6ad74ec31dded405deb34490c82912807ee9dd78","bytes":1497,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Petya_MS17_010.yar","name":"RANSOM_Petya_MS17_010.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"95e2598102b2a36ac1634e5fed236f052f3e4670f9b983dde901eba9b8790617","bytes":4348,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Pico.yar","name":"RANSOM_Pico.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"eb733958d3faa961409a4a8a70c8ca5eef3dedf5e7b2725a068b1b83b27177c1","bytes":1038,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Revix.yar","name":"RANSOM_Revix.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"cd72435edaf63bf148947fa4326b60e1b3556a3cdfa4f79526f11b05e47fb1dc","bytes":1870,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/community/malware/RANSOM_SamSam.yar","name":"RANSOM_SamSam.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a2d3af7fd3ad056f029de931d79890e540b5901ae67fd565969eb114c969ec09","bytes":5055,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Satana.yar","name":"RANSOM_Satana.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"86061e2f4649721ffea025ca4166c0328f52a311cb4b3a59142a01c0ce25e056","bytes":1134,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_Shiva.yar","name":"RANSOM_Shiva.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"189320361e2340850345c7c06728a4e26db1c316dfcbfa20e2d9096cacab7bfc","bytes":1404,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_Sigma.yar","name":"RANSOM_Sigma.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e2b43b7cff9680eb8a853c03139d8f0f12771724e71f2e1297f328e85cfb19dc","bytes":618,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_Snake.yar","name":"RANSOM_Snake.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1434e4780fd8a190de8302c51046e95301641d48632d56d26132f949e0f78142","bytes":1631,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_Stampado.yar","name":"RANSOM_Stampado.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"60b41f887dc916b53e08c6d037492361f0125575c4cfe9c5d07d95cb000b4bab","bytes":770,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_TeslaCrypt.yar","name":"RANSOM_TeslaCrypt.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"45a89521a98f29e88c950c4a179320d72dbc5ec0be0573d56df6c97b16f59996","bytes":455,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RANSOM_Tox.yar","name":"RANSOM_Tox.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c9bd8debc23c9297cfc5be90d97891173b9088ef7105b681f65098069b6da9e3","bytes":7005,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_acroware.yar","name":"RANSOM_acroware.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9e5c154935e542ae31fa479be0dd8d9b8fbfa9cec0c34d8577c2080dfe676581","bytes":961,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_jeff_dev.yar","name":"RANSOM_jeff_dev.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bda084c7c948957a48daa89150211ad34de5f10058727cb1fdf45572985bf390","bytes":657,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_locdoor.yar","name":"RANSOM_locdoor.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"aa9a782f3b3db487ba3cfda7ff16fb82c608d3f5273d7b03366111b8466fa426","bytes":1214,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_screenlocker_5h311_1nj3c706.yar","name":"RANSOM_screenlocker_5h311_1nj3c706.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0f143aa9cfd9b700e174a21227516b1c7587a0eae5a64e9c52edafa0af5d8ea0","bytes":1090,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_shrug2.yar","name":"RANSOM_shrug2.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a19f1c7aab4918c766a56a37003bf4b7c71cc02769ff3d5ad70706214a562045","bytes":722,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RANSOM_termite.yar","name":"RANSOM_termite.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1fb5f09f2f6edd75941e4a93deb96d624026ddb0dc6530ce2d95b13f4ec16c9d","bytes":954,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Adwind.yar","name":"RAT_Adwind.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ede42a2563578eb5d6a76deb3f0dc20bde4d69855b6e8d9bae7394f340a7c1cc","bytes":2739,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/community/malware/RAT_Adzok.yar","name":"RAT_Adzok.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"df4e7488ffbf27e4612fe0c3767449496a190273e90f66689fe0c5e37a4d8cf4","bytes":712,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RAT_Asyncrat.yar","name":"RAT_Asyncrat.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7ffca8d68a1dd22ac9c9ca157ec3de87b770597718f9cfbf88e22cd61f6a6e3b","bytes":1414,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_BlackShades.yar","name":"RAT_BlackShades.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9e61a9eb04282f9ef5cbd657bcf83f730bc22f4cb68fadd627f7f0eaba926bd6","bytes":3709,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Bolonyokte.yar","name":"RAT_Bolonyokte.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f4cd285fe2eddd588a6099fbef02b358cbef4675fe49de958fa59da988b8b3b1","bytes":1474,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Bozok.yar","name":"RAT_Bozok.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"054a879f53d83555b7f258a6f0e52dee894e9cbe375c38f802010679486dc575","bytes":554,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RAT_Cerberus.yar","name":"RAT_Cerberus.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a6fe5c78f9ffe498792cf2ad7d20919d90a843241ebf306ef65e2fbd7d22783d","bytes":528,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Crimson.yar","name":"RAT_Crimson.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"bfef5ced47a2b670a925b01626ef571ed702e61276e53b1ddb93e2086486c045","bytes":535,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RAT_CrossRAT.yar","name":"RAT_CrossRAT.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"5fb77ceb1a6b0ecef02f52e24c4e6d186c1d2169d1dd37a154473d6c799a0939","bytes":571,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RAT_CyberGate.yar","name":"RAT_CyberGate.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"039dd0b7298e2361faebeca7b6b86e9f2aff27e81e52b9965051507cd3d6caf1","bytes":762,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RAT_FlyingKitten.yar","name":"RAT_FlyingKitten.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"df75d17dab4ccd04ad6170db6f8242f61a2f292b37b7586e14f2c3aadcb0fe00","bytes":1410,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Gh0st.yar","name":"RAT_Gh0st.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"9d2b9e2b66b4c736a96fb01fb0dbb7f59a0ece6ef1c1d5abb36a3ffa5b8b9f1e","bytes":1746,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Gholee.yar","name":"RAT_Gholee.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d64ffd74d35d6583cc78040202d047d5586a3d18617106158a12ece370fcce17","bytes":3142,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Glass.yar","name":"RAT_Glass.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ab89664ad56cdf3edeeb3f7a1091249bd9cff96fa5a13bff883881c33eacb3ab","bytes":415,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Havex.yar","name":"RAT_Havex.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e7543c6fafca47dfec3c5a46322c0082b963f89f696677a9ff36b134bbd6d58e","bytes":2691,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Hizor.yar","name":"RAT_Hizor.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f4ecc38816218ec530924c8df5b66e16cd28f1523b9c613e13c98733ebb91956","bytes":1291,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Indetectables.yar","name":"RAT_Indetectables.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"ce11d9ca64485d53d4fefe8f8a70628cc5c9e4e2297aa01529257aba904d0d4a","bytes":2287,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Inocnation.yar","name":"RAT_Inocnation.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"a80d444050d7150ae77af98b5730ec90eb0d90f289ae0db2c6e58d6955dcaa2d","bytes":2366,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Meterpreter_Reverse_Tcp.yar","name":"RAT_Meterpreter_Reverse_Tcp.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"deedac96e7c7861d486a3132137932110f87c44fb58b87a0f372f313b7628e75","bytes":1001,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Nanocore.yar","name":"RAT_Nanocore.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d284cfc4f391711bde33c861045b3f3c6632f95513d71eafc34d0f88045e6f3a","bytes":2675,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_NetwiredRC.yar","name":"RAT_NetwiredRC.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b830cbc869aa19c35230c047e7e5f4eee5972cdc7c0390739aa3639ffcb77c5c","bytes":1089,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Njrat.yar","name":"RAT_Njrat.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"58f2e83f91df433050c5363e18a23ef1b713f3ffb7d2dff55612795ab86d2f96","bytes":5009,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Orcus.yar","name":"RAT_Orcus.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3e994efb4935f645b6ec3a6dd9441f14c8b763b45ac2c2c78a7f244a77d0503a","bytes":1696,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_PlugX.yar","name":"RAT_PlugX.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"6774bf00fcd7b08c0c38707be8d9ad0e856d10d416152f93a5524460f8a97793","bytes":2144,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_PoetRATDoc.yar","name":"RAT_PoetRATDoc.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"146556ddb8a9f207ac94b49a87f968aa8f823a9cc2f11fb378470f8c0637af08","bytes":704,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_PoetRATPython.yar","name":"RAT_PoetRATPython.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"78e61204937b408009720810cbbbfc41e8ccb035ad425ef9257711bad43c92fd","bytes":731,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RAT_PoisonIvy.yar","name":"RAT_PoisonIvy.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"adeb9350d6165b581e3a8f5f93cfc470dc50d9d950598589d0a5defcfa8d6d8d","bytes":1985,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Ratdecoders.yar","name":"RAT_Ratdecoders.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e8933f9091a0b6b5e8123778b649c09bd4357e03b5972658f24e08bca3f0befd","bytes":15414,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/community/malware/RAT_Sakula.yar","name":"RAT_Sakula.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"b73d45be15d06194c15b50e2c3bfe61279dd3768e2eda842ce1ccb6f6f0d432f","bytes":2835,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_ShadowTech.yar","name":"RAT_ShadowTech.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"17fa104e58bfeb1b0ec12fb8cf23b2cbd6f8cd4e9a5fa8b1b49f387b3ba24160","bytes":966,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Shim.yar","name":"RAT_Shim.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"e1ce121cb39bf84dfa0d6fa2d847de22b4e49298be5e56b277fc5688fa35ec4e","bytes":1641,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Terminator.yar","name":"RAT_Terminator.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f443e781516905a36454fd7a2eff3ef263f7a3b1ccc47fd4d05a024cac51bec7","bytes":1009,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_Xtreme.yar","name":"RAT_Xtreme.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"534e2188362b359df304154aaffd3ce8a0e48e828a3e46bee9ba0a5e377a706b","bytes":3442,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_ZoxPNG.yar","name":"RAT_ZoxPNG.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"3fbf6919398bb59690d0b5cde88ad0ec2e1f0c61c0971eeddbc7d538a6551ea1","bytes":656,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_jRAT.yar","name":"RAT_jRAT.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f0af1931a738cd28b6dc71f2ea9dcaf63973dbea4a9ea9204bcdd5c7d839908f","bytes":620,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/RAT_xRAT.yar","name":"RAT_xRAT.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"47a2dcaf25e4ffb0614286b355d0dffd6d486419b3a76d544c9bf93b766476ba","bytes":827,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/RAT_xRAT20.yar","name":"RAT_xRAT20.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f0aef0e49787b573b265d2b78fd8514b367b424b87235a0a66b42ede80b1c214","bytes":1375,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_Chinese_Hacktools.yar","name":"TOOLKIT_Chinese_Hacktools.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8587baa0e26c028eac789367f21a3bc2bb7b44e8e036f0993d01e42fa174aa67","bytes":81578,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_Dubrute.yar","name":"TOOLKIT_Dubrute.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"fd4d54dc9985cb596abd394b4be498ff05c06f8c5efb441aa7f49bf7b36113cb","bytes":629,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_FinFisher_.yar","name":"TOOLKIT_FinFisher_.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1d0ca90bc26682ed51df1fd2efee53c903cbf901ccc818f2a638fadb2560cd0c","bytes":6093,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_Gen_powerkatz.yar","name":"TOOLKIT_Gen_powerkatz.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"afe7c6303ad87ad6e33c8e5b15e56bbc823e6b4997646fe546c16a79f26a77a8","bytes":1330,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_Mandibule.yar","name":"TOOLKIT_Mandibule.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d268e39a68c5061714d03c8bfa73ba3f26baf56b9d0204c88ace0a578bd55911","bytes":2423,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/community/malware/TOOLKIT_PassTheHash.yar","name":"TOOLKIT_PassTheHash.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"fcd799a2d70ae86d04e96360003186e4db1232f43bceb5b03652dc1c69914184","bytes":7934,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_Powerstager.yar","name":"TOOLKIT_Powerstager.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"78886255e692878b5578eb76c0c97d33f3c8ccecd62b3b15ba25e3bd7ec026dc","bytes":1620,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/TOOLKIT_Pwdump.yar","name":"TOOLKIT_Pwdump.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"aa358c0e6fe8a503f9e55ba0ab3c13a519bb3572c9d5f5cc614867e66df15bcf","bytes":1112,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/malware/TOOLKIT_Redteam_Tools_by_GUID.yar","name":"TOOLKIT_Redteam_Tools_by_GUID.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1a838cf88da655f831fb6f5dc7077843292cefba5e634af559112a0e7c387b37","bytes":141505,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_Redteam_Tools_by_Name.yar","name":"TOOLKIT_Redteam_Tools_by_Name.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d02b576ed63a58850576ddbc1f3bd398d3d861d46df4e6131ae66f5b12de183a","bytes":26300,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_THOR_HackTools.yar","name":"TOOLKIT_THOR_HackTools.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0cbb100a9f32f256ebfcacbd68288672a8b28d15f40149a74e94556a62d8e326","bytes":95720,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","Android/Java"]},{"path":"rules/community/malware/TOOLKIT_Wineggdrop.yar","name":"TOOLKIT_Wineggdrop.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c291801b8c86b58d51ae93b36a954774a99660c6a06e00c73053102ad0f24d54","bytes":743,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/malware/TOOLKIT_exe2hex_payload.yar","name":"TOOLKIT_exe2hex_payload.yar","category":"malware","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"55d1da2ce2f0fb1a4fd1817e3812e40b8e2f07770c7d5ed86c36a0c23d8bb7bc","bytes":838,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/packers/JJencode.yar","name":"JJencode.yar","category":"packers","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"f3a36fc688c07383e98b017b1b6163a778f69ae62efec1dfe0cd9fa668cfbe8c","bytes":614,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/packers/Javascript_exploit_and_obfuscation.yar","name":"Javascript_exploit_and_obfuscation.yar","category":"packers","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"7f95375550048b9ea308a5ccc1afc70ecccdf79f8f6f362382f0eb2f88fdadee","bytes":3617,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/packers/packer.yar","name":"packer.yar","category":"packers","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"8d92e28d372ac723538e134a5831c838dd183d3ea3d53b5d08489b31e05992ec","bytes":562019,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/community/packers/packer_compiler_signatures.yar","name":"packer_compiler_signatures.yar","category":"packers","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"5c60ed67663f1077cb8987c541ce2e18235d25a2f1aec1f986e10ddb92abe5a8","bytes":21462,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/packers/tweetable-polyglot-png.yar","name":"tweetable-polyglot-png.yar","category":"packers","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c2b9d6c0b408ddc93df23b9b9f7735a211e35ef95828170d0235bf9416013b4e","bytes":414,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/webshells/WShell_APT_Laudanum.yar","name":"WShell_APT_Laudanum.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"01079db0e73470b5535234bab294f4ca41eeb1d5ae100eb2d15024feeb950cb0","bytes":13085,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/community/webshells/WShell_ASPXSpy.yar","name":"WShell_ASPXSpy.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"d8b9d1615ef2a10bf2954e231eaf27990b4f4149ccfca48aa1c0ec0d9e488e21","bytes":625,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/webshells/WShell_ChinaChopper.yar","name":"WShell_ChinaChopper.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"784d825f237ee845851e3a074edb497cdf77394ce03a95649d35b1b700ac2381","bytes":1279,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/webshells/WShell_Drupalgeddon2_icos.yar","name":"WShell_Drupalgeddon2_icos.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"c192fb25a27b71666d570418a694088c847c569b83668ce0eb77265498e79618","bytes":918,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/webshells/WShell_PHP_Anuna.yar","name":"WShell_PHP_Anuna.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0bc79b3f60c2fb5296115b1a73cccd6a91ae1a03d710504f037e8f6457f1ca4c","bytes":700,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/webshells/WShell_PHP_in_images.yar","name":"WShell_PHP_in_images.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"2313f59e8eaabf58651f732721ac88eb7d4e15aef7405c333f87cdbe5f1b7b76","bytes":536,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/webshells/WShell_THOR_Webshells.yar","name":"WShell_THOR_Webshells.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"1434419ec7277717ee7e2a9453543939c0e01ca7551c0bd8cb7468b672d2a99b","bytes":306810,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","Android/Java"]},{"path":"rules/community/webshells/Wshell_ChineseSpam.yar","name":"Wshell_ChineseSpam.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"53d75b2d7816c1fe932360a4dbea96df2ad07a2685b75330f3d102ef8181a58b","bytes":1077,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/community/webshells/Wshell_fire2013.yar","name":"Wshell_fire2013.yar","category":"webshells","source":"community","repository":"Yara-Rules/rules","commit":"0f93570194a80d2f2032869055808b0ddcdfb360","sha256":"0fbd8132df913d77e0e2414bbbd8472cb77c4e960ae6569a8bbe3a2de561891e","bytes":843,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_aa19_024a.yar","name":"apt_aa19_024a.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bdf26bde7835be3336f6ac237a4ad051d2f498ff9d3802b2008cbcfec93bf8b2","bytes":917,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_agent_btz.yar","name":"apt_agent_btz.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"80d496458c0dace2917d0bdc40d1ffc21db78d1d238989056dabe7ac7effa86a","bytes":4653,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_alienspy_rat.yar","name":"apt_alienspy_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9f23ad164c2c802b96dedcf1df3230423fba0d76a1f4b53a1e999cdcb2092644","bytes":1690,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/nextron/yara/apt_apt10.yar","name":"apt_apt10.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c81dbfb56436110d3a900f4b516c4ea722f90bc101dde28e2f49f1818292dbd1","bytes":65418,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt10_redleaves.yar","name":"apt_apt10_redleaves.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7096ab3e5ee61ce272158519410c02ffc45c6d38088f5811e3d8cac11a7f1767","bytes":2040,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt12_malware.yar","name":"apt_apt12_malware.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f98d1e5e6beae814e38eecd7b103152d8c23147da92409e9d1e135077d26e753","bytes":916,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt15.yar","name":"apt_apt15.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"83719c007aeb76698997b44add763c01556b6da33d29738ffd0354ddc49c4cd5","bytes":10980,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt17_mal_sep17.yar","name":"apt_apt17_mal_sep17.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7fba4e133e937ea4e95881efe4bef40d959aeaac2eeed14ab40257cf29f17590","bytes":4414,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt17_malware.yar","name":"apt_apt17_malware.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2a1d5bb8d6ec799a003a505c44f877fce92dbc4d948b6ec20aafc22ade0f558b","bytes":1045,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt19.yar","name":"apt_apt19.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cc4cb3b369cbf128de38a085bafa02789c142e6e1d469808265bfe644aad0f14","bytes":2902,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt27_hyperbro.yar","name":"apt_apt27_hyperbro.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"285b20dec691b581c792c94e5977accbcca0b8a732833ce74f2dbd5b4abd89ab","bytes":30623,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt27_rshell.yar","name":"apt_apt27_rshell.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"27715967814a86f091cc54f186adf9d0612460fbe3839a78efe003dda0ded002","bytes":1945,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux","macOS","Android/Java"]},{"path":"rules/nextron/yara/apt_apt28.yar","name":"apt_apt28.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2bfeefef5c26ebc9f91fa167b9b898db21f461da0b59a633b04925bb5289997a","bytes":7349,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt28_drovorub.yar","name":"apt_apt28_drovorub.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7810f2fff8149cafcf8d5c63eac7fd726e02e5e15ba503d17cc7de8b5135c550","bytes":4815,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_apt29_grizzly_steppe.yar","name":"apt_apt29_grizzly_steppe.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c44fb9e32de11306fd0b993ff57d033146e02f783aed7c4ec59f826266a5aea5","bytes":12702,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt29_nobelium_apr22.yar","name":"apt_apt29_nobelium_apr22.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7ddb5ce74c4cb142f7ef6ab0ca51ff2bbd7f080daa6d4d5b418b28a6e0ea7a3d","bytes":1460,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt29_nobelium_may21.yar","name":"apt_apt29_nobelium_may21.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ef39524be7622a585fd03cd9f21caf8a072036f82c744f67e09eaeda1eb976cf","bytes":13270,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt30_backspace.yar","name":"apt_apt30_backspace.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"83b163673faff34942f02bc5e853e59bed1b9e67e85b3cf62f595d55632337ba","bytes":47081,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt32.yar","name":"apt_apt32.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d7c99fbec3bfb60ed70aa0a59704aeece2a38429e00e85af361151fa85dea790","bytes":2040,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS"]},{"path":"rules/nextron/yara/apt_apt34.yar","name":"apt_apt34.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3f123991bdee054f047c4a172517997cda71ceda34f19ce05503d17a6c0eb3c3","bytes":2767,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/apt_apt35_malware_may26.yar","name":"apt_apt35_malware_may26.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c49d6a8cfa7107db9d3b715e9c3bb61f8137be2533987d58cb3ddb84ec602e37","bytes":3562,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt36_operation_sindoor.yar","name":"apt_apt36_operation_sindoor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"07f7903891c2cd5fcd865a75477ca0a93ad688d5d30d45fec66eff3234943abc","bytes":3038,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","macOS","Android/Java"]},{"path":"rules/nextron/yara/apt_apt37.yar","name":"apt_apt37.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"de78f343f494345138befb2bb301d712fcf7f6f56e4f5e5802ceb5a3904beba5","bytes":872,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt37_bluelight.yar","name":"apt_apt37_bluelight.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fce731a04dcff1450bc5df7da50eab81bf08f17379a7dde546020bc8977c7cea","bytes":7228,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_apt3_bemstour.yar","name":"apt_apt3_bemstour.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"73d3b8dbfd71c339c27ca38e5e1c1f11cb09e6a57ba9cf728374ac5580215e18","bytes":10517,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt41.yar","name":"apt_apt41.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7b7b2973895e875a1b74944fc7c402efcc283cf0a7a46d65029091a0f115965b","bytes":11888,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_apt6_malware.yar","name":"apt_apt6_malware.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bd327eebfe988fa8fdc2f9d02880fac08dc04c6fddada637f08d90f51e1ee8cd","bytes":2179,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ar18_165a.yar","name":"apt_ar18_165a.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2c456124ab93e6531efca714ee53706a0c31bff77f19e11db0aad1416abc3d16","bytes":3145,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_area1_phishing_diplomacy.yar","name":"apt_area1_phishing_diplomacy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1d46dafebac1a77532669d88e9a8f814b49b087729d12ae46a65eb3ea80ee803","bytes":2257,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_aus_parl_compromise.yar","name":"apt_aus_parl_compromise.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"089cb0db38080f8e5f00dfac7454f02163d1d07753162b37dbc41858867f2ded","bytes":7619,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_babyshark.yar","name":"apt_babyshark.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e245d8f5c92adaf758c1ce400bc6c836c5b4b0a97654cff03771e0e4d0d93bc0","bytes":2340,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_backdoor_ssh_python.yar","name":"apt_backdoor_ssh_python.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2227508d808aae7bdd9896cdb2c29cecfc0e07e1e4522a4c8cbd05ab58ec5cff","bytes":680,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_backdoor_sunburst_fnv1a_experimental.yar","name":"apt_backdoor_sunburst_fnv1a_experimental.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bfd67059e90271382f9f52df2c30cfe2e3e7e4edec4195318132ae5fdb33547e","bytes":2806,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_backspace.yar","name":"apt_backspace.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"39e336215d4b46a3b55bb4ad2d1ec91ca9f4990c32e0f4e95fc2ca5ba19f23b1","bytes":512,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_barracuda_esg_unc4841_jun23.yar","name":"apt_barracuda_esg_unc4841_jun23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"551eac2d6ffe02676ddc68bd44864fa116b7a444cedcbdf8ee18f6ca58cc957a","bytes":9044,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","macOS"]},{"path":"rules/nextron/yara/apt_beepservice.yar","name":"apt_beepservice.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2a4810d95fb39c4b54e5c647ef663df4c0bab0cab8704503cebf6ae4c0259eca","bytes":1095,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_between-hk-and-burma.yar","name":"apt_between-hk-and-burma.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"45822da6f787d895ac7f7dde8ea50fea1a677031973b0ab70204e7c61234f615","bytes":4429,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_bigbang.yar","name":"apt_bigbang.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f326245650edbae8dd0c7cd32958d087ebd0fe5c393ba5006c1b13473e2990ad","bytes":2864,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_bitter.yar","name":"apt_bitter.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"90b07682488b43c6a1972a37c47c6c68e470ed13c117370187450974c3c5ef9e","bytes":856,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_blackenergy.yar","name":"apt_blackenergy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1e1be897a5070c5e25802ad253680166aa8ca7dc4a0e8644ee4717f99b4a6416","bytes":8319,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_blackenergy_installer.yar","name":"apt_blackenergy_installer.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"69436be9ff84ccd2d262802428709c3fe2b5e0547d7b74d194953b8f6ce8d418","bytes":1395,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_bluetermite_emdivi.yar","name":"apt_bluetermite_emdivi.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"71e9b60903c6e6d3702b9d008e27342885571ee0a881af048b0108b7483b6c87","bytes":5547,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_bronze_butler.yar","name":"apt_bronze_butler.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"39f4d6f9c56c44439d59d19ff76d576f04c714cd36cd78d9370df591d8fc9ad9","bytes":8743,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_buckeye.yar","name":"apt_buckeye.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"65109208d6ad9ddc1623c8c236df54fc4edab0a059e5e8d5c2f3078fb90544ac","bytes":3189,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_camaro_dragon_oct23.yar","name":"apt_camaro_dragon_oct23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1ee352bb38a5abafc1845bbfa0b89fc2e1f7742a9f356ab79192751abebfbfd3","bytes":2168,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_candiru.yar","name":"apt_candiru.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1a298e8d5cd766334da384ab4b06bccec2c8020c3d8dbb68eba159cab755307d","bytes":1850,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_carbon_paper_turla.yar","name":"apt_carbon_paper_turla.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5dbab50a9828df070b2f1a4f59938cd28f100b596d0e06861a9478e96302462b","bytes":2826,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_casper.yar","name":"apt_casper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"16c089772291dcc2f024a47a8e85216f46929aa8ad768f2cce31336ef59d93a1","bytes":3769,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cheshirecat.yar","name":"apt_cheshirecat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"85ace8fb1b0421c0eda5c74e7a7543de880475908586c95a7373c091d5cdda08","bytes":4305,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cisco_asa_line_dancer_apr24.yar","name":"apt_cisco_asa_line_dancer_apr24.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3ae9b04c2cacd959ed5c28bc6ff88db92aba25dd4e05a883b055016907737d08","bytes":613,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_cisco_asa_lineviper_rayinitiator_sep25.yar","name":"apt_cisco_asa_lineviper_rayinitiator_sep25.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7c4f10880efa387e1b7eec26eab9e1c961a6dde191cff0f090ba2771e5500420","bytes":9010,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_cloudatlas.yar","name":"apt_cloudatlas.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e0a46fca45fe2e7b5f4fbfd0829a264392f2fc707cb7b730743cbf0ca456799c","bytes":1407,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_cloudduke.yar","name":"apt_cloudduke.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4efc19d3e6a076d00a74c82dbbbc6533bf622103a785d64840c1f5c9c6b01905","bytes":2608,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cmstar.yar","name":"apt_cmstar.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ce41f484a0e3052bf7d0b90313c4cb7f747c9de4d12827c24f6c85afb7bc9ac3","bytes":977,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cn_brickstorm_sep25.yar","name":"apt_cn_brickstorm_sep25.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"07e089b31b93327dd5b5b5bce82918147c9b5fb3a848baa6016b1c87b56fac15","bytes":9342,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","Android/Java"]},{"path":"rules/nextron/yara/apt_cn_netfilter.yar","name":"apt_cn_netfilter.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1006b9054d120ed96555d773910591d3ebd109baa371663483f9efe4d0c0a75e","bytes":5407,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cn_pp_zerot.yar","name":"apt_cn_pp_zerot.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"063dc2600d8f5b7094672d65c5a4e6cda34727ee072156e62fec7eec73bbdbcb","bytes":10626,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cn_reddelta.yar","name":"apt_cn_reddelta.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a7def6ad6440b09f65c00304b0503a46f29e038e9d70ea975582765cebc2226f","bytes":3124,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cn_twisted_panda.yar","name":"apt_cn_twisted_panda.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"90b4c4f3e7e57f321f475ec3a65953e59d82c808344d043d08a989ee68b5f720","bytes":10272,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cobaltstrike.yar","name":"apt_cobaltstrike.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3c6c47f7d129614c5b79f672e23268ddce2578e15e3725a451d289703553f466","bytes":5370,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_cobaltstrike_evasive.yar","name":"apt_cobaltstrike_evasive.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4aebf7f8a318c2ef76780f2dbaebf56925d6e101b5545a53e40be77942b98728","bytes":39159,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_codoso.yar","name":"apt_codoso.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bf60bfbf97dc4af23ccbe460a377f89a521c14fd28d6b6b014a58ab0dd074641","bytes":16668,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_coreimpact_agent.yar","name":"apt_coreimpact_agent.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0a37feda0807116e69e609843c0e9302c6cd8497b93171d1ee3334b59687efa0","bytes":840,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_danti_svcmondr.yar","name":"apt_danti_svcmondr.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ecb73d42e2f14afbfadb97710390b41e2875efa68eec41904791ccd611ff8ca0","bytes":2922,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_darkcaracal.yar","name":"apt_darkcaracal.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ce43b9c29d94a90f8b0cd1c5e36c5ee6a1a48d3ec5999b197684240d0642e23d","bytes":1257,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_darkhydrus.yar","name":"apt_darkhydrus.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"63b4c5ce0008b825bf77e53d447c4090d75089eaca3de579db37d030fe8835e7","bytes":4591,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_deeppanda.yar","name":"apt_deeppanda.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"86d6f5ad9ac6d85516a9bb76a8b7a8d0a4f3a244cd3297d45006591ab0e386fe","bytes":3692,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_derusbi.yar","name":"apt_derusbi.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"00c09951598e2354aea149f3e2bf73e122321556dd67e4d959fdae47ac1864ce","bytes":5200,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_dnspionage.yar","name":"apt_dnspionage.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"41d23fbf2e6417e9598000d0345ed40a2f67c5ea26a21af62686a32a13634b51","bytes":2009,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_donotteam_ytyframework.yar","name":"apt_donotteam_ytyframework.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8d5578751e806d51ab48b2b2a9e3399b02f7859fcafc849ff6e7caf91d021405","bytes":1742,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_dragonfly.yar","name":"apt_dragonfly.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ef213e8bd36f73f43a4cfb22674742f54e73e9209f6d0db257b314b504c555e5","bytes":4785,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_dtrack.yar","name":"apt_dtrack.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fa0207020224f97b84bd8de1555ec991ef479983e43b8b23f12ddc147b8a9857","bytes":2232,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_dubnium.yar","name":"apt_dubnium.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f22ee3d864f1a7a0c2a3252e36e6fc66f2f628ff1bc9a6c551380b7776350fff","bytes":6961,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_duqu1_5_modules.yar","name":"apt_duqu1_5_modules.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"78fa2c11f85eef81d63035330b3a55757a20728bc6022658ebe08132a42b8858","bytes":586,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_duqu2.yar","name":"apt_duqu2.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ece37b7bb86047533fb362cafff59d627c58a322f847c262cddce2408b4c9f05","bytes":4910,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_dustman.yar","name":"apt_dustman.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bd83f1428aea5f185675bafa7214d91e7199ac35ba7384149dc5bf1d00b06e59","bytes":2004,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_emissary.yar","name":"apt_emissary.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"62b981fc31c7a9c5564d5129473e7bd9c63b076fb5f999f6d9d640bf0315f363","bytes":2147,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_eqgrp.yar","name":"apt_eqgrp.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c08459e5c299a6964114db796b37f5eaf1f0e7be20c5ca911ff9e15ceb1a2a0d","bytes":82170,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_eqgrp_apr17.yar","name":"apt_eqgrp_apr17.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"40767acc209d32ad1d8b16423725efbcaae086dcf26206e58b9895bdce11b3ab","bytes":175720,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","Android/Java"]},{"path":"rules/nextron/yara/apt_eqgrp_sparc_sbz_apr23.yar","name":"apt_eqgrp_sparc_sbz_apr23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a12d55c3170120b4f4828d6741460041e1209e24edbc5b418b34c2be58e556fa","bytes":1943,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_eqgrp_triangulation_jun23.yar","name":"apt_eqgrp_triangulation_jun23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"28a9969e8defe637ad6e87b73dbfde4776ac80ce54864ff19b7b0cbbcf985830","bytes":725,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/nextron/yara/apt_eternalblue_non_wannacry.yar","name":"apt_eternalblue_non_wannacry.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a22e53f519288f59f641a3d13fdfd23c70b530ca1498a278f1cf79f60714a0fe","bytes":2808,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_exile_rat.yar","name":"apt_exile_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7b805a3af04f4e64d924349c44ef28df64c69e19dec7e44166e22ad64b0e158a","bytes":928,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_f5_bigip_expl_payloads.yar","name":"apt_f5_bigip_expl_payloads.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f5dde81962bbe2aae1769fb18a62f68b85369a09c0f828aa0636c68d8f878b05","bytes":892,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_fakem_backdoor.yar","name":"apt_fakem_backdoor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5615a594f4f1702a08bda38b3118d89067ee684649f665d64a379f1a9555f9f9","bytes":2027,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_fancybear_computrace_agent.yar","name":"apt_fancybear_computrace_agent.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"905a156814f33a2068ecbe619d3e763ea8a1e015038b470372e3e1703399e7c3","bytes":603,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_fancybear_dnc.yar","name":"apt_fancybear_dnc.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"753ff07fe8f8078a3c8906a09833ee772cf5d72c82ccf521246b233946c4c0f9","bytes":1520,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_fancybear_osxagent.yar","name":"apt_fancybear_osxagent.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d906199b9bdbf8d23428746642039064ffae68c1b80f61858865d1eb680891bd","bytes":998,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/nextron/yara/apt_fidelis_phishing_plain_sight.yar","name":"apt_fidelis_phishing_plain_sight.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3fde585dcc56489134420c2bc9449665a0eb9a22475286b51bbf2e8a45a4d1e8","bytes":1063,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_fin7.yar","name":"apt_fin7.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7544b8077a0a8427b707d7ac8a286e3359a2f04cb7c342ca2ae440f35eb2874a","bytes":16035,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_fin7_backdoor.yar","name":"apt_fin7_backdoor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5bb000fca4cd23b3c00d91601b334b47bd73f20dcd7d1db4ba902111e9edf5b8","bytes":2930,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_fin8.yar","name":"apt_fin8.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2f4aa2cc168f0e22ecc5dc64e2d59fa14a658ccd6ad12cbff298f09536579904","bytes":751,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_foudre.yar","name":"apt_foudre.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"888051eca60245ada90846549c6e209f7eb2ab7f9ae374f5123ad0189a3ebcfe","bytes":3754,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_four_element_sword.yar","name":"apt_four_element_sword.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b405dacd786e1ea4ad046a0fd9e0e3abd8e908c59a59d9e91ab3bb4f48e5df45","bytes":7190,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_freemilk.yar","name":"apt_freemilk.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ba5818c27a026ff45526714a916f1c64c69875ec92fea7474af96cb49cf9a1b6","bytes":4533,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_fujinama_rat.yar","name":"apt_fujinama_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e0b0eed5ae908cad8278e563dda98221bbc7c84e9ef4e60b43575177258610b0","bytes":974,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_furtim.yar","name":"apt_furtim.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b66a81df8f6c3965c277808416d9ecb1c294443c3ff95b0d8453bbfca21daad2","bytes":1845,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_fvey_shadowbroker_dec16.yar","name":"apt_fvey_shadowbroker_dec16.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fe83dc1978a85b324c5ba243902938c7be1a5e7ea76b77cbe20c7828c1e5912d","bytes":18456,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_fvey_shadowbroker_jan17.yar","name":"apt_fvey_shadowbroker_jan17.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9fabbd84859f3d17daeaa68cb143dbdc83779fb5508a42527763653c204499cf","bytes":1642,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ghostdragon_gh0st_rat.yar","name":"apt_ghostdragon_gh0st_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7f2b2665d2d00101f4c3537a242ca0a907039e45a2394354b9bd6967480a3a53","bytes":3457,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_glassRAT.yar","name":"apt_glassRAT.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b9e7790133306ef9a92808f87e1ff96026bf3e026e79d2b5b7b097d6ec23ab90","bytes":2828,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_golddragon.yar","name":"apt_golddragon.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"83ce345ea6afb065fc240e939a1e31ade960b635371cb6727d9f8172439cfa91","bytes":6871,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_goldenspy.yar","name":"apt_goldenspy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"eaf2046051c2bcf2bd5e0ef4f849cfab5be9f8931aeef92cb604c33b50870f1f","bytes":879,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_greenbug.yar","name":"apt_greenbug.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2a1231de101c9249297b1338b0de1278bda939fc198bac07ffa66ba80d427c42","bytes":7126,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_greyenergy.yar","name":"apt_greyenergy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b9bcf8405953a736beb4ee7a71b47345bb88ddc3a5d54142acebfc927b3c3770","bytes":4324,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_grizzlybear_uscert.yar","name":"apt_grizzlybear_uscert.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"47807ea156950915dba013471f67705f94580b00b680beb3ac43626695cce15d","bytes":76198,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_hackingteam_rules.yar","name":"apt_hackingteam_rules.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7c9cc138ebf1fed63e13b97ba375363a5248ea67c6c58b0ba3d75ed650051b63","bytes":3711,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_hafnium.yar","name":"apt_hafnium.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f88c1792e04c4164395a49c088369743101584c7fecd1dc654c34e6d9e14129b","bytes":17835,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_hafnium_log_sigs.yar","name":"apt_hafnium_log_sigs.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ef85deacab566f4313b3d6d5b51764b8cdb3d49fc1363eb3d65417fcb75ed27b","bytes":5949,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_ham_tofu_chches.yar","name":"apt_ham_tofu_chches.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6a1778a35ac0e99ebe8a020ed8c6dedace4fac1e8d7db69dfc847793b7c25550","bytes":650,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_hatman.yar","name":"apt_hatman.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6fd1f55e89e8c295b6aec9e8031953724b8033f3a8557fda67c53aaf3e1840b6","bytes":4670,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_hellsing_kaspersky.yar","name":"apt_hellsing_kaspersky.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8a99528d2f0c408e1b24cbbc208f3852c4f725c5e0cd896256a938fc297a6ffe","bytes":4704,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_hidden_cobra.yar","name":"apt_hidden_cobra.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9d583a5833e3a5e9516feb40cba0ecb7753d1ad23d90e2a494ccbbd10835db1d","bytes":7578,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_hiddencobra_bankshot.yar","name":"apt_hiddencobra_bankshot.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c13ff39268a692189f012dc95d09b512849ae8ed954a80ddafc42704d329ced8","bytes":4473,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_hiddencobra_wiper.yar","name":"apt_hiddencobra_wiper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"10f2532dda22034429d8dabc12d1b5bc184961d967f3f2cc8e230fca206f68e5","bytes":1701,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_hizor_rat.yar","name":"apt_hizor_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e80ed338fcb94b941beebc7c35faad4224e40800bdcbe8b0535417e0fe20544a","bytes":1034,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_hkdoor.yar","name":"apt_hkdoor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d3510bae1d6b18aaf80b1d9ee1f69c0ead86d4eae780e9bc51ee8d2a8a6a6938","bytes":3866,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_iamtheking.yar","name":"apt_iamtheking.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d39be0115b62151c68da56f7b89a94b21494833c7ba7f4e83e448120bba10b9a","bytes":2514,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_icefog.yar","name":"apt_icefog.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"77e6cc3e32fdc7fe9b2c6227c0dcd8a98ead262d75f11eeaf5f9b425f7581207","bytes":1125,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_indetectables_rat.yar","name":"apt_indetectables_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ff5561cb3e9cfb619949b64daf1f6f74a6e0d6ee072115a67ab754c3e9bba2bc","bytes":2424,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_industroyer.yar","name":"apt_industroyer.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c4a78071a467b5623351c02a7fb9ce307afcf87ac2285518939d1f354ea5cb6d","bytes":6652,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_inocnation.yar","name":"apt_inocnation.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"86b0797606dff2eb30695c57ff1df45e2c77ed3ed2683278e9822c8792227285","bytes":2298,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_irongate.yar","name":"apt_irongate.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cb94a427347069f5b0ee4ed33534ce1cc1840e55ee9c096f8e1c99cdf0dab382","bytes":3131,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_irontiger.yar","name":"apt_irontiger.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9ab99bfce0bb234c2fd41d939d3ca27fc7ab3abc5b8acfccb2bcf9e3bdd86072","bytes":6814,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_irontiger_trendmicro.yar","name":"apt_irontiger_trendmicro.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4ad5e2d32c6be8b89f7493507c7c02342d65b24e1b8a1faa9541eaa9e3a6a74c","bytes":8795,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ism_rat.yar","name":"apt_ism_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f3467f1309e316cb04f8b726f6bc17f59c0f9fd1b7a83416703d953d4bda44ed","bytes":864,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_kaspersky_duqu2.yar","name":"apt_kaspersky_duqu2.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2213cf8c76ff5bc4a32b1928123b28ace8e2dd01a568311f2cf210234cb98a8c","bytes":6850,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ke3chang.yar","name":"apt_ke3chang.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ec3ef0b69139bc3c01d062d38195d451e8dfc3e8407fa27e029546ed043f627c","bytes":1830,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_keyboys.yar","name":"apt_keyboys.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"57d18942200fb3a79e24cb5f5354a3d317688b9fbe725103198480ce8813d5f2","bytes":6999,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_keylogger_cn.yar","name":"apt_keylogger_cn.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c519a53c2ab67a572bef705b70e4d2181bccccd2f69697f70cbdb0f2e0ab9641","bytes":1286,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_khrat.yar","name":"apt_khrat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1a75bfa1559f542e14aae79b9ab55a7370fd346e01dc1eb787a43e6e2e3af370","bytes":3035,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_korplug_fast.yar","name":"apt_korplug_fast.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f6d2ea55a15c516b889debfe0c1e8f08f003f0cd4bb4169bb5d2cf7718523b43","bytes":987,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_kwampirs.yar","name":"apt_kwampirs.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"24b5014ab701f70485f9eb6533a2e3883d3d7b797c01627ec0aca19279bf03a8","bytes":3289,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_laudanum_webshells.yar","name":"apt_laudanum_webshells.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ab895af093afec02cb46582fc06fab320427759dbc43aeefea60499ed28d62cc","bytes":15783,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lazarus_applejeus.yar","name":"apt_lazarus_applejeus.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"42abb5602d0df0854e132826635489834b02104e95e51ec84b6cbbdfbbfe11b9","bytes":3908,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lazarus_aug20.yar","name":"apt_lazarus_aug20.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"725326e5dc19a87011d4446bbf7797f3553c63608ace4f1b68d3d2177c6129ee","bytes":1716,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lazarus_dec17.yar","name":"apt_lazarus_dec17.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0311cd0d40ce532c52cb2017d990971ae7e268b0ad0ec88f102f6bffe38e2302","bytes":3961,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lazarus_dec20.yar","name":"apt_lazarus_dec20.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"697b1d04ad63ba19cc3186e50aa6c543be615bcfcd85e17496a02c396d5263f2","bytes":12001,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lazarus_gopuram.yar","name":"apt_lazarus_gopuram.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1c8402c10cdfaa79b42447a14d65ee4fffebcd9a213c9d1b174270eaad2edce1","bytes":807,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lazarus_jan21.yar","name":"apt_lazarus_jan21.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3a2ad3a0a7a0fc5403a1af29a1aa2633b7277a785d38b4cf1e90f7a1e3401b61","bytes":1169,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lazarus_jun18.yar","name":"apt_lazarus_jun18.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"075e18e786c88e7533ebe5e789db24c5a5c6e799d51d7ad9b621754f60400c8f","bytes":3549,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lazarus_vhd_ransomware.yar","name":"apt_lazarus_vhd_ransomware.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d3105bd218c9c701dfc7fabbb6e163b55651ee9a401bc43a9b068c252c396e9d","bytes":1799,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_leviathan.yar","name":"apt_leviathan.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"07c23fb8dbdc64e54f7c5bd88726345528e2d85c663600cc699c6cdb8af3e1c4","bytes":4130,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_lnx_kobalos.yar","name":"apt_lnx_kobalos.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"35402caeeca7e3d772387d01f2673e51f8f1ad18ab17cc351ba797ad277b2563","bytes":3357,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_lnx_linadoor_rootkit.yar","name":"apt_lnx_linadoor_rootkit.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"67b7f8a00211018a51e663bc770e3832d98cc3e1f9067d725caaba955e426ba0","bytes":1643,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_lotusblossom_elise.yar","name":"apt_lotusblossom_elise.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"851b0357ac55b77f4ac7194d9229289f19c723010ee05d51955718f3cf6da0e8","bytes":1140,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_magichound.yar","name":"apt_magichound.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"358d543a19294cfdf968fddfb91cbb56d0f6b55956e2fff81a70a84ef2774b1f","bytes":2210,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_mal_gopuram_apr23.yar","name":"apt_mal_gopuram_apr23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"146ffd982c6b04f664084d8942b700752215a54dd14d7d78e3641ce0319ce916","bytes":4638,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_mal_ilo_board_elf.yar","name":"apt_mal_ilo_board_elf.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bb92d093e190318f713a178cde62c88df5ba0546c100e541f5bb888bb237f6bc","bytes":679,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_mal_ru_snake_may23.yar","name":"apt_mal_ru_snake_may23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c99614b2e9d49c0cbeb5f4ba84114cfb43ee969bfaf8218a48b9534e279a2b36","bytes":3437,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_microcin.yar","name":"apt_microcin.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2b8e53ef5d2a5d3638be8785310db2ecebf399a59c0c47342f724d44e1b51601","bytes":5802,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_middle_east_talosreport.yar","name":"apt_middle_east_talosreport.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"59e601ae8b7bdc7c9fbbcf1ae377d19d2a6c68a0a4af06a68a6e36c7bbb1ff7e","bytes":4606,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_miniasp.yar","name":"apt_miniasp.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f8f21caa743025a2a2756f0a12ceeaad4e6134e58f708e1d23b21b0259839e48","bytes":2353,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_minidionis.yar","name":"apt_minidionis.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"83dd5e74432051abcc94a40d857fce8988758b5b9cb9c39e8e35fccb58a222f1","bytes":3868,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_mofang.yar","name":"apt_mofang.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6b4b21d9c6f1748a78994cb3358131c42ff700e0c608a75d25f4402fdd986f40","bytes":1668,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_molerats_jul17.yar","name":"apt_molerats_jul17.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f99ca06a4b8b9c6f6135ff5185538b30db9e5a5cbcf1bf5681172b8bc07608da","bytes":5008,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_monsoon.yar","name":"apt_monsoon.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f04d72dd0608ef8d408dddb03e0e4064997f7e3ee065c1c342f7e97b60b23fcc","bytes":2418,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_moonlightmaze.yar","name":"apt_moonlightmaze.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"69f53f6b0d8aef67d380b1049108ae80db4853c777c6d3912da36d0990881961","bytes":7151,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_ms_platinum.yara","name":"apt_ms_platinum.yara","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fc65af9b77ce399fd70a43c0650af93474a85dd5c5bc04d5a9a09e5bbcdb904d","bytes":11436,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_muddywater.yar","name":"apt_muddywater.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6fa35c1026f116f1d3e68e1ac1b451b922b69280ddeb5f750a4168ebeb51aed9","bytes":3208,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_naikon.yar","name":"apt_naikon.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"944327707e2cc294dd447bb5ce3f939d5b040158772a4d698d11c19fc3e0d215","bytes":1434,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_nanocore_rat.yar","name":"apt_nanocore_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4c4f77d06fecc64faa5ebcd466fc9f7ee38ef6bad2c67bbb5a48100bd5ca2e6c","bytes":5447,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_nazar.yar","name":"apt_nazar.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1717957416f1ccb3bd2f790917dc7d6584d23a58917970da9b36e6ec7f3a1170","bytes":2839,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ncsc_report_04_2018.yar","name":"apt_ncsc_report_04_2018.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e38377f6ee5218738c75f24b189eaf88af72ff116d3ee67c74e8a95164ddbb6a","bytes":7488,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_netwire_rat.yar","name":"apt_netwire_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c4e27768c1f1724af66008e9abe338f75d0d6c2d1009f40e0060c9c072a6427c","bytes":2153,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_nk_andariel_jul24.yar","name":"apt_nk_andariel_jul24.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"93a61dc67ade777be0c530497e033d8e87613c017e8a98ee82b50d13b2a6ee54","bytes":31768,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_nk_gen.yar","name":"apt_nk_gen.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cec319f3e51c337fb8f584c624e03a439486a5be8b0c913e030c2528f0997599","bytes":1764,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_nk_goldbackdoor.yar","name":"apt_nk_goldbackdoor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ec27035918f8f82a641b21afa5650cb6ea2a45f1dbefde31736ec55e3d8aa164","bytes":2658,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_nk_inkysquid.yar","name":"apt_nk_inkysquid.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"084cd8fb43dc89a80508fa49c538d36435232453002082937f439d2f2dd18d52","bytes":8122,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_nk_tradingtech_apr23.yar","name":"apt_nk_tradingtech_apr23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"dbe912950f882f3d29de0a21efa22fbeb1a15c6fa95d732cbfca6e3b62542a78","bytes":12433,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_nobellium_rdp_phish.yar","name":"apt_nobellium_rdp_phish.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8e172ceb261dbe325e8cfbd4d79b9c5bdd0e2d9e2d508316eaa1c5559fbff6c3","bytes":1124,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_oilrig.yar","name":"apt_oilrig.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2957a8e94f1123e82d2514b08d56fc2c27f57ddd6963a0d792d063e1a04bd72d","bytes":15025,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_oilrig_chafer_mar18.yar","name":"apt_oilrig_chafer_mar18.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8e5b4f9ae25f9ff024b3f79d54ba28085e3bb8698a55e543a4eb8e39a77040ab","bytes":4426,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_oilrig_oct17.yar","name":"apt_oilrig_oct17.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"50a5c54be6c39b08b22cf6531b62432c27095330543de2098486b1dc621123b9","bytes":5202,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_oilrig_rgdoor.yar","name":"apt_oilrig_rgdoor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"387cc881b489e0aa85029e085834938fb3d60c22ad1f4c4625c93e05425a1621","bytes":1473,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_olympic_destroyer.yar","name":"apt_olympic_destroyer.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"90fe5b490a7aaf96b6cba58dfb0b627c8b3905888141f3abc3ca0177f986bbf2","bytes":2727,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_onhat_proxy.yar","name":"apt_onhat_proxy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a2a0277723f6fddea4afd63b6a693fd211189ff7d23980ad1336049d9250bd7a","bytes":1436,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_op_cleaver.yar","name":"apt_op_cleaver.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c65067e7e243e5fbaf64bc29a4b5fcda0f02c2d446f94dd4ab0812361ec55ccd","bytes":9390,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_op_cloudhopper.yar","name":"apt_op_cloudhopper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"069c51feabc27e37e566fa2f0a32f124acd3cf5d136d72694119bab2584f29c6","bytes":14173,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_op_honeybee.yar","name":"apt_op_honeybee.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"59984b145990c8bcb508bd4ef5a13dd6bfa6f2205ac003aba07c60eabd0910ee","bytes":3485,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_op_shadowhammer.yar","name":"apt_op_shadowhammer.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ef13616dbcf9a6956c4c74f90db910e830c81b3ad3f1106108a09d57edcf984c","bytes":1108,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_op_wocao.yar","name":"apt_op_wocao.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"aaf3803f2e5ee592ed4fccbe29ba07683caa8a83862d8772f6129db318add9d0","bytes":16146,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_passcv.yar","name":"apt_passcv.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"752553556dd5015bad954906dbe3cf393b553ea71b3c78e33591fc525f90639a","bytes":7871,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_passthehashtoolkit.yar","name":"apt_passthehashtoolkit.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"940cebd82e375a4d4fb4ab6db1f3af10d71feddeff45ce995189efea24335aed","bytes":9021,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_patchwork.yar","name":"apt_patchwork.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b660571fd07979402dbafe5dbc25e91d18c186d67ff2da5e7d5e929a7fda2e9a","bytes":1476,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_peach_sandstorm.yar","name":"apt_peach_sandstorm.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"053fab2b7b478b523fa461b817c3f3297a44b0ae59283409bd597195799b4ad9","bytes":1082,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_plead_downloader.yar","name":"apt_plead_downloader.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"abf1939b9d28e5f5cf46478b65fd2f292fc20260b07516dec4e235615a64d589","bytes":880,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_plugx.yar","name":"apt_plugx.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9978c83c0c5d3603e508fe1aaf9888d0c4063f78a79d22637bd7cd23e886b705","bytes":1744,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_poisonivy.yar","name":"apt_poisonivy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"42c73131f0ad5adb94cb2dcf23a79843afd6b708b680dc0e9f90109ece81614d","bytes":12355,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_poisonivy_gen3.yar","name":"apt_poisonivy_gen3.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7002139690bcef3e89a9b63dcb9e5d15bddf85fa537cced69633b53316404c46","bytes":825,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_poseidon_group.yar","name":"apt_poseidon_group.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4256715c4be7dd6934db2d5607636b099fe66beaab52d270eae00d80fdabfca2","bytes":4076,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_poshspy.yar","name":"apt_poshspy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"dbbee40c6a9a767dad1809ccf8166ab4273b237b7887f65c519de62407055dcf","bytes":1065,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_prikormka.yar","name":"apt_prikormka.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ee48998df2e17e7df7f167b1e3259e4f4ca4a882554ec9ea28194d88144dcbfc","bytes":5457,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_project_m.yar","name":"apt_project_m.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"927d3db090261cb65168583206a709ab42b4b9764edf1f8179848f4c4d1af2d7","bytes":1966,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_project_sauron.yara","name":"apt_project_sauron.yara","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"854249333425ffd813ff7eb0c4d3c4987e1b7105ff9ec106689e298e828a1b61","bytes":4167,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_project_sauron_extras.yar","name":"apt_project_sauron_extras.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6be79714da2360b8bfd3445074a2337ccc34135ca2e47c5de3a7aa32578d34d1","bytes":9960,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_promethium_neodymium.yar","name":"apt_promethium_neodymium.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7d1ca61eb7baa5d87b8fcf9b649c84901c24b1be2cf4a1bca211f0520c6a5235","bytes":5317,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_pulsesecure.yar","name":"apt_pulsesecure.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3194bb929347343eba86f3514876e8daf6aa726b03243b652d2e4412c8e4250f","bytes":15321,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_putterpanda.yar","name":"apt_putterpanda.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"30395702e8dedc00cf02be19951e5f234333ad5d59644fe2d1b105f992a32372","bytes":16176,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_quarkspwdump.yar","name":"apt_quarkspwdump.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5a711bb90f0796ecaa6f66f4a5cf085527d4054784e4a73bb64720bc535a679a","bytes":1074,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_quasar_rat.yar","name":"apt_quasar_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cf22dad8af57426685f69c630052cd45eb8ac0f52b8b5c8bad280c32b228ecf9","bytes":3797,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_quasar_vermin.yar","name":"apt_quasar_vermin.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fc0f0c4d4d31643eade5a68d83391ffd758b1b25fe6596d09a48e7d7629b2775","bytes":3248,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_rancor.yar","name":"apt_rancor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"982cbb5672936cd54082513c74ceaa8e4ad4bf1615df9158db2894d5b3c10a0e","bytes":3724,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ransom_darkbit_feb23.yar","name":"apt_ransom_darkbit_feb23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"558bdabfa12d544b19060c49b2f73338ebe82f839c06adc04af8488533388c5a","bytes":1771,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ransom_lockbit_citrixbleed_nov23.yar","name":"apt_ransom_lockbit_citrixbleed_nov23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"162d8614cc453ad218136347a5ef8a66d96ca7cc112faa12d7ff913d20795d0d","bytes":4292,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ransom_vicesociety_dec22.yar","name":"apt_ransom_vicesociety_dec22.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3acbb3cdb52b03716168b2207b73c1cec5b32656ec1e4fe106282bcaf9425e41","bytes":2983,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_reaver_sunorcal.yar","name":"apt_reaver_sunorcal.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d44387e62e906026a68f890d9cca72298770ee23222ce90f792e84e9d984ddae","bytes":4627,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_rehashed_rat.yar","name":"apt_rehashed_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"94a2e2950b2f47b60518101e388f5b0291e00c3217b14e8ff9caae5e3a0a0ac1","bytes":3709,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_report_ivanti_mandiant_jan24.yar","name":"apt_report_ivanti_mandiant_jan24.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fca362021bab9a578d872867d1578548d8c7f5ca2b78353f804c31df7bd8634c","bytes":4827,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_revenge_rat.yar","name":"apt_revenge_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"edbdbbd9bf59946b7fbfe58bb3c3a631c59c2352f174bb956a3ffd741f0033e7","bytes":1321,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_rocketkitten_keylogger.yar","name":"apt_rocketkitten_keylogger.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0cabec7ee98cb9e238755ea6a0a05cd7bd212fd7b081bfac51fdba1262fc57b6","bytes":1159,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_rokrat.yar","name":"apt_rokrat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3b9f91888862f6c1a9db77716c6a654fc964cc1d7924d9979b3e23ae406d4bb1","bytes":4961,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_royalroad.yar","name":"apt_royalroad.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f4abc0e0b1b993bc008553024f40629a64d7961496c6402514b0fe612b3ae8d0","bytes":5708,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_ru_crywiper.yar","name":"apt_ru_crywiper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"232a542f3e345ec1eef27d9f6f8c839210d87debed3a4af261ff817f274d7df4","bytes":632,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ruag.yar","name":"apt_ruag.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b41496c3df5f775167e73d2fe04979852da0d3579dea06590d13ee2be5634165","bytes":2719,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_rwmc_powershell_creddump.yar","name":"apt_rwmc_powershell_creddump.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2cc3ba7d204ef17b5fb21a2504c1e75d9b32a3efc2024643ad8d1e9ac6e7fa86","bytes":1783,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sakula.yar","name":"apt_sakula.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"96261a01d9402e5160f3f480e568874a00f9391b213d0196eabf8868b6645536","bytes":2954,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sandworm_centreon.yar","name":"apt_sandworm_centreon.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0c968e50cdea704bf37b56d26f63f44e10b513109785a0c110a5f8968dd65844","bytes":8181,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_sandworm_cyclops_blink.yar","name":"apt_sandworm_cyclops_blink.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8222fddc34ac0b1f81787d5ab8b924b87138916198c50c4aac944323771d54c3","bytes":8920,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_sandworm_exim_expl.yar","name":"apt_sandworm_exim_expl.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ffa62fe768858fad0989ea0a22033b971346b07cb29bf4da4c65346d106284bb","bytes":7596,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_saudi_aramco_phish.yar","name":"apt_saudi_aramco_phish.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6922f7d38c627b5abbdf8b6d12ea3d3f4ae9a57fd00e3a5ac044a05bf8999733","bytes":1022,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_scanbox_deeppanda.yar","name":"apt_scanbox_deeppanda.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5d0588653387f3b6deb3adc2a9cbcda5d8ff310351d6e6668d347f123733b1da","bytes":1271,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_scarcruft.yar","name":"apt_scarcruft.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"86554aee714979f6144b69b0165761dc0b1389182f5d5409bdfabe0f72d6bb9c","bytes":500,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_seaduke_unit42.yar","name":"apt_seaduke_unit42.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c402de0ee50b891e57b9becf0bd33b73726303b0aa3b581d237f53595484920f","bytes":937,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sednit_delphidownloader.yar","name":"apt_sednit_delphidownloader.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e86719548290e6477c1517220fc33f232a94d35d54e8d21a96ed525f718f347f","bytes":3592,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_servantshell.yar","name":"apt_servantshell.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c0f2882cef9e1204c36e056797346ba050ff6a10e4a308e523297782a15746a2","bytes":500,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_shadowpad.yar","name":"apt_shadowpad.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a3ec7b3b6821759cf0d1beb7cd24d8bdf830ce40e1b6533efaf3c4d93a11a113","bytes":1424,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_shamoon.yar","name":"apt_shamoon.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"be6cdc80902c1cdd3de7bb2b29cc16bfbad5a7eec47708b283b27a1dbf2a30f4","bytes":532,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_shamoon2.yar","name":"apt_shamoon2.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"869915e0d599211595baf6c0e44ee528c1037f268e3dcd65311c6cf1812f50bb","bytes":2899,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sharptongue.yar","name":"apt_sharptongue.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0f3c29236f41a109674280f65ddfb54fd50dd07390fbe931e790c2b52dd68e2c","bytes":1940,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_shellcrew_streamex.yar","name":"apt_shellcrew_streamex.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"26b8bb8ffa044e09d80475e2ef137c347904d4b3dcdb3a7141d16391a1d1d087","bytes":3788,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sidewinder.yar","name":"apt_sidewinder.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bb4b146f444ec039ea7d137c2211b207d5d9a470de0b595dd5efd4b7793170f0","bytes":2084,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_silence.yar","name":"apt_silence.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7fb5bf0fd24f4a9eb62b4dbb0c0ad445fab714cc34469cca6b0cb6b5d29a4182","bytes":2452,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_skeletonkey.yar","name":"apt_skeletonkey.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b5c8fa0de4eee2a53a2889ef0e5f5fdec7cef924bf943e68c0980eaf4cd19704","bytes":2228,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_slingshot.yar","name":"apt_slingshot.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"77b4e3193d73e05ba14f40e4c034ceab4f26ecc45ebea81a18439eb99fd18d15","bytes":5929,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_snaketurla_osx.yar","name":"apt_snaketurla_osx.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6b442bf00669952612595b7b6f3fd43ce5c492096126fe847f87752c1fc2fdbd","bytes":3346,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_snowglobe_babar.yar","name":"apt_snowglobe_babar.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7857a3af174493c5d51ef37ff295afc98c3c6e8767cb2268625d729f1206e9cb","bytes":1470,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sofacy.yar","name":"apt_sofacy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3dc67a9a26e98b38603e885b1198b0c5bf4e581984e4bbe9c895ce98faee7243","bytes":3052,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sofacy_cannon.yar","name":"apt_sofacy_cannon.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f1b0d529d2bdd833d6b893c0c4893a51d2e25f07fd00c85233e32ec0f5dc2b3d","bytes":1618,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sofacy_dec15.yar","name":"apt_sofacy_dec15.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"88ec324be88ccf93b549435ebb3184cec18d363e1a695c44463430807dd7cd5d","bytes":6064,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sofacy_fysbis.yar","name":"apt_sofacy_fysbis.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fdfaa29d892c3fc7c42ebf27981eeb762f3ccfd0e44e3946821092e236f8b081","bytes":2362,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_sofacy_hospitality.yar","name":"apt_sofacy_hospitality.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e27665697869a00fa77b5e41217b4dada907fa294441d99e64f44218857ea56b","bytes":1269,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sofacy_jun16.yar","name":"apt_sofacy_jun16.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4e0114e7d9e9576f4fa122ece4b9ff1b98f76a32d8e2496e501eb257bef43643","bytes":2441,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sofacy_oct17_camp.yar","name":"apt_sofacy_oct17_camp.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"502520e5a064176fbfc73df34a0d3cd97fe0b189a3db7f6bd7f9a627486419dd","bytes":2628,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sofacy_xtunnel_bundestag.yar","name":"apt_sofacy_xtunnel_bundestag.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b352d13f782fa69dbb3fd7969256b766d351122bc07da19054423b9bac1a56d8","bytes":4804,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sofacy_zebrocy.yar","name":"apt_sofacy_zebrocy.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"49bb7b85f2129420a1fe5244e96d66a095475e42d32805955b9ebb1fe9179cb2","bytes":975,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_solarwinds_sunburst.yar","name":"apt_solarwinds_sunburst.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b5f4cf111be44a28485367af7eb09931b75d44668a1c2cdd6e549b87fff72e5b","bytes":11706,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_solarwinds_susp_sunburst.yar","name":"apt_solarwinds_susp_sunburst.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"56ccaea6d23ae9898bbf2e6b38939b95221169e9cc7e2ca5a04f4d2d54321965","bytes":1222,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sphinx_moth.yar","name":"apt_sphinx_moth.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ed0651b8a0ed948cfa6549ffb521e39eaeaf9f1ea1a11c554f385724172bfeb6","bytes":5164,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_stealer_cisa_ar22_277a.yar","name":"apt_stealer_cisa_ar22_277a.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0665d2b9cd0c60ff1d089b90454ca99068c6bc42a63f7d993276d30b51ba0a6f","bytes":2474,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_stonedrill.yar","name":"apt_stonedrill.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4cc521dbe75a9c7c4efe8bd25973ad1f09008fab2a4946da3cefd6147774f6f7","bytes":7986,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_strider.yara","name":"apt_strider.yara","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"359aecfcc1f8343893d86d5985a19c5b474cfa96ef0b765137e512f3d9e19a5b","bytes":3483,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_stuxnet.yar","name":"apt_stuxnet.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"37460ad4ae442e0ee60f6cb1ee1574aeeb87fe6ab768d4de33e42a280b705f3c","bytes":7896,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_stuxshop.yar","name":"apt_stuxshop.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"322a165340b0c6bbd5780a8a2804ae175dd0c9c4d160681d7eb8d3cef18807f9","bytes":2207,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_suckfly.yar","name":"apt_suckfly.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fc287903877796e9f679f0d44b3afc474d63c9b5fe74d6d9277ea1f0757c895d","bytes":3736,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_sunspot.yar","name":"apt_sunspot.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f3423d6b561316ab6d1b908a06e86119a7b6033169bc65f8abb512c8c0b6f71a","bytes":3279,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_sysscan.yar","name":"apt_sysscan.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b5dcb8009f1f833bd2558d480d870ce42526b1e6066cf1daa18bbbfb9dcb25d3","bytes":1476,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ta17_293A.yar","name":"apt_ta17_293A.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b3b27b48cc4ac9588519b861ef195e55753df364dbc7f6f01ab2e27598f16a9d","bytes":10546,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ta17_318A.yar","name":"apt_ta17_318A.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"647bd731c10e8e97a66d25055615527cacf49aa3c41b09e82e9346187d126c6f","bytes":3406,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ta17_318B.yar","name":"apt_ta17_318B.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5318e3e1f73332e38d530524c21c85105b79ce24c2fb36ef0130d5b4f88848bd","bytes":2826,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ta18_074A.yar","name":"apt_ta18_074A.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2a770087cc10d79811d781ea97a0e12cb1ead27366bbb055a542882fa3e1387d","bytes":2400,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ta18_149A.yar","name":"apt_ta18_149A.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"412a1bc3c303898596ec1e44a5cbce4743e4882076e66fb3a1f4cc5ce4cb4105","bytes":3079,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ta397_dec24.yar","name":"apt_ta397_dec24.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e1895e580854306c320566122ebbf1499b4e51f3265314612764f873e4e6f405","bytes":5258,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_ta459.yar","name":"apt_ta459.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"008d3126db41185226921cb334ee471d832705925f6877e0f039055a70a36ea1","bytes":1611,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_telebots.yar","name":"apt_telebots.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"74be69d1fc87cde777d2cc6cdb23b845640c1fdff6783240284afde6ba3abfe6","bytes":6483,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_terracotta.yar","name":"apt_terracotta.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"521f2a68eb5a5f0eccfaa91da8ee4f8ddd426157af015f8a450db50c71cf3096","bytes":4333,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_terracotta_liudoor.yar","name":"apt_terracotta_liudoor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e689178aedc88bce1a597875fbbb5a91be0caa7ca8ed21fe07b320813f4364b6","bytes":796,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_tetris.yar","name":"apt_tetris.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"02ebc0098e1c28d4eaa785f67e85befdf603750f1a7087a5f6739fa09eea8f5a","bytes":4782,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_threatgroup_3390.yar","name":"apt_threatgroup_3390.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6a028db5f38537aa0d47c5801845c846c41f4b77a4b47fc269a2683d96eb176a","bytes":12676,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_thrip.yar","name":"apt_thrip.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b1e4745ec8e0eff4580062b793594d09f79d7cb20cff941200214a5b6373779e","bytes":17573,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_tick_datper.yar","name":"apt_tick_datper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"29714abb934b400cdaffc2f313f60ace2e3ebce508712516299fd266d85653fc","bytes":1786,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_tick_weaponized_usb.yar","name":"apt_tick_weaponized_usb.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6db6f0ad4cd276ee714effcacc97291225ed0115ecce9249a936737e67b5b346","bytes":2663,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_tidepool.yar","name":"apt_tidepool.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"01a6f41aa201f0ffff8b2a97d0d6c543bd344492f963367b9fada3e6a53e4901","bytes":1400,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_tophat.yar","name":"apt_tophat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"97876f4ca3402d046405d48ad64202574b50c9d1440b70e7668c6d9050c05451","bytes":3617,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_triton.yar","name":"apt_triton.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"99885dd22939d939ee60ed77ac57c71d4c3723c2b31195cdf80b3da0531cc8fa","bytes":3468,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_triton_mal_sshdoor.yar","name":"apt_triton_mal_sshdoor.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7a52d71545928055c4e4f9faf0020c7d5128fd1439fddfe791ce36215cba70dc","bytes":8102,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_turbo_campaign.yar","name":"apt_turbo_campaign.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"dcb6aa89494624a3d95f94a484301a224a4196e8da13e6f46d487d43456350c2","bytes":5957,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_turla.yar","name":"apt_turla.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"345934ea73512fa852eacd6b31504605c587f21536d06fc01fdeafd01d3ecf5a","bytes":13157,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/apt_turla_gazer.yar","name":"apt_turla_gazer.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1dc99f919239bfe5ef80aa0f7aa4c92bdab8246453081d0e95abc173d6eb7cd2","bytes":1660,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_turla_kazuar.yar","name":"apt_turla_kazuar.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"730ff93aaaa661a1988a1f54851d3500610902e9938b0583d0b943b130e6896e","bytes":2209,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_turla_mosquito.yar","name":"apt_turla_mosquito.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"efef5e5ba399bf4f66715ee334ccfe4cae92d1529fb854fdca1d68bc07f7da0c","bytes":6651,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_turla_neuron.yar","name":"apt_turla_neuron.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"322b7dba621c03f3ae1aa5b336cdd974fd9a4ec4bc914909719a82b3ac2ca21b","bytes":6303,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_turla_penquin.yar","name":"apt_turla_penquin.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b8996077f670d946dfe9bf89f7d49d0329f2fc7d84b4070d2608e1500273104b","bytes":3654,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_turla_png_dropper_nov18.yar","name":"apt_turla_png_dropper_nov18.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4923b40ad9803d7886721091fcbe2f0a835abb9770d18d4fb1a8d0705635359e","bytes":3479,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ua_caddywiper.yar","name":"apt_ua_caddywiper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6bb62e64ef24d26bc216d69e2d74e9b3ecc155797f0c64d49f3513f56d0e1717","bytes":1129,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ua_hermetic_wiper.yar","name":"apt_ua_hermetic_wiper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"284ddc919608053b8ee7941bf94a87829ce64da1fa7611363747ee9eb6cda618","bytes":4017,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ua_isaacwiper.yar","name":"apt_ua_isaacwiper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"516d1936b7d4a52a69db09459caead3e5987c9126c7e826ca79c26c36aed7af6","bytes":1171,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_ua_wiper_whispergate.yar","name":"apt_ua_wiper_whispergate.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"caf90995f0ac4d95e20b17ec8805c670431f6b3ce9f6378a4e3a0a10c4e524ad","bytes":5250,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_uboat_rat.yar","name":"apt_uboat_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"eff32f68cb5ce325e67ce87198c1f88e98835a103750794eadbb30d5a2b59762","bytes":2856,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_unc1151_ua.yar","name":"apt_unc1151_ua.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2f013c287a1b34ccbacd590259b2443b686d74eb4d5a1abecff0501bb76ea938","bytes":773,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_unc2447_sombrat.yar","name":"apt_unc2447_sombrat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"794b384fdcadbe59eafa48489ebfc2cb6b931c38214171bbe3b8c1a02668f75a","bytes":6833,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_unc2546_dewmode.yar","name":"apt_unc2546_dewmode.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c80966e57b3d6e6bee285b04e2154520879ecbf4e64d324bdaaf5e9bbe44d23f","bytes":1077,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_unc2891_mal_jan23.yar","name":"apt_unc2891_mal_jan23.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2474a3e9acb3cb74bb9a7e0bcf659cc84a5e1a69a0030be4d96b0a537c9f4f37","bytes":3309,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_unc2891_tinyshell_slapstick.yar","name":"apt_unc2891_tinyshell_slapstick.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a016c36674e015a2cd3fd2b7773f19689ef2031ba7a8253758c7929f7caf59eb","bytes":2809,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_unc3886_virtualpita.yar","name":"apt_unc3886_virtualpita.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7216d00a59e0078f44e54e709de5663496a9fbf09e906257018d4ef42a755a6b","bytes":3563,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_unit78020_malware.yar","name":"apt_unit78020_malware.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2d1988351dbc956cca1be46b49a46dc490c0a6cd8d2dac0fe3d4ee9727afa247","bytes":5636,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_uscert_ta17-1117a.yar","name":"apt_uscert_ta17-1117a.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6fa20e1e49939873f511b62d104f4fff19b1617065d9fe2c017af2daad0ce0a3","bytes":4343,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_venom_linux_rootkit.yar","name":"apt_venom_linux_rootkit.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"75649e7170ace01986ee1f6d8f1bdcf8f8af194bd71530ef94cf42a77c8706c0","bytes":1181,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_virtualizor_compromise_aug26.yar","name":"apt_virtualizor_compromise_aug26.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"90ccaa538059162dac0735167ed52fe25d5b33f816dd75e3e4539fb7b66da0e1","bytes":1498,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/nextron/yara/apt_volatile_cedar.yar","name":"apt_volatile_cedar.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"07a1a7af1f6315646738800fa075f7b37e57cd3ab89a6fc3c2f31f636380083d","bytes":4680,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_volttyphoon_versamem.yar","name":"apt_volttyphoon_versamem.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0e47c81e62c8ee2a66450994541a0ad8597e3d0a940a255a925a40c3236ec3d5","bytes":1587,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/nextron/yara/apt_vpnfilter.yar","name":"apt_vpnfilter.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b272f4698a4f57d753938f195e9d878b096bde43143a6c6c78d6d85f85b7b478","bytes":4476,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_waterbear.yar","name":"apt_waterbear.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f9bdb61b99161f3d317b2cb7c7f60e36e61842b291d1ff35341047c56f0e4513","bytes":10427,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_waterbug.yar","name":"apt_waterbug.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cf2679ea0e971e25ba61157d6dbcab56f7fee8dd100d03525ffa420a835e3fea","bytes":4985,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_webmonitor_rat.yar","name":"apt_webmonitor_rat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"234d12246949ffe93bf2fa7c1792a0db06b045bf2a0ab1564e358ed72dce1a18","bytes":1562,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_webshell_chinachopper.yar","name":"apt_webshell_chinachopper.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"22da4bfc1eeb2728a7826643ebaa86cd082af6c950752c4c962a3b9f479f909e","bytes":672,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/apt_wildneutron.yar","name":"apt_wildneutron.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"116b9e8f648707e5b1ff3f1478b4db80a3b8af979d327cf63eb14cdff0e6d706","bytes":16087,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_wilted_tulip.yar","name":"apt_wilted_tulip.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7e4db5ff36968e94bda0b33099d4a158a4fcc6de9c642bd32cc56f27de7e1bc3","bytes":13394,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_win_plugx.yar","name":"apt_win_plugx.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"517e83d12fb083ec1e1f8a8d5dc36017e91f903011e22881ebe236e0522f15b0","bytes":2494,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_winnti.yar","name":"apt_winnti.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bf80fb82b9eceebb867ae9f35bb292da68bbe5ab957efec016a0aad663576558","bytes":17333,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_winnti_br.yar","name":"apt_winnti_br.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1c7c81badeee07f09a3551b98015b9fe34c7dd05b8b90a6a0fad190a3caa514b","bytes":1460,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_winnti_burning_umbrella.yar","name":"apt_winnti_burning_umbrella.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"21e762c501dde308835c9ceb96976109cae58470242ee12e86cec5e9488d1371","bytes":20137,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS","Android/Java"]},{"path":"rules/nextron/yara/apt_winnti_hdroot.yar","name":"apt_winnti_hdroot.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0bda8b9c165cf4e86116411dc7fe86d306806a0ba99661dd46da5436bfc7c7bc","bytes":3633,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_winnti_linux.yar","name":"apt_winnti_linux.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d73609e9a51afa0a1afd482b24a65ac51c438ef5ddf827ac5058c0408ded3c59","bytes":1778,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/apt_winnti_ms_report_201701.yar","name":"apt_winnti_ms_report_201701.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"eda44109cd3d10223eae335fbcb20c9607d5e9697101f6d9db87aa2033748324","bytes":1473,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_woolengoldfish.yar","name":"apt_woolengoldfish.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8754424da3a5ff168a5196d3bec5081f0bad1301c8b26682351699c25494a18b","bytes":4277,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_xrat.yar","name":"apt_xrat.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4a71225ee15ff1909bbfdb8963925a7f9ef7d7ef4141adae2b0b4b09dfffdd7b","bytes":1612,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/apt_zxshell.yar","name":"apt_zxshell.yar","category":"apt","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d1cad2f1c8e907a139c0e7f41406af5f3b038794f73d9124a292d7c3ca04095d","bytes":5885,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/bkdr_xz_util_cve_2024_3094.yar","name":"bkdr_xz_util_cve_2024_3094.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cfdb96beeac02bf203ab1d3392b432bccab3d3c42b23ff18ba75085441f28671","bytes":3256,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/cn_pentestset_scripts.yar","name":"cn_pentestset_scripts.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8fc22baa75895cddaa8877b1fea4bfcc8ac2fa17fbd025a896095563e32ed8ee","bytes":17600,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/cn_pentestset_tools.yar","name":"cn_pentestset_tools.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"eb01ed4e03a207dc1846f47b05ece3fbcf31186d25763da2a69ea182e4ae05f0","bytes":103756,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/cn_pentestset_webshells.yar","name":"cn_pentestset_webshells.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a7bf6e7b31636833a8388fe7ad65a2a895ab7b16148ce33866c31f48e3dd1e88","bytes":52220,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/configured_vulns_ext_vars.yar","name":"configured_vulns_ext_vars.yar","category":"configured","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6f0c7837baa9b7b81d06fc857e9ed58a1a885b61ce8b2efec1b19413392e21a3","bytes":8878,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_academic_data_centers_camp_may20.yar","name":"crime_academic_data_centers_camp_may20.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c33f8985b7d591460e1f832a96e83a88341f7e13c498daf09c83149c7209556e","bytes":1464,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_andromeda_jun17.yar","name":"crime_andromeda_jun17.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6a3433c750cd2e5b3ca5ac36f3918a632cf57ab8b166cf45b3cfc7a67063c628","bytes":1699,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_antifw_installrex.yar","name":"crime_antifw_installrex.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c0fa3acbe3236c11620b08cb8b986a43dd2b219d558dcefdb9240a79b467dec1","bytes":674,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_atm_dispenserxfs.yar","name":"crime_atm_dispenserxfs.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"36a8a652f89a98ec4c24935a5e62bf2e9be055d76d14ccf754e64c3063d9d0cc","bytes":784,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_atm_javadipcash.yar","name":"crime_atm_javadipcash.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"821599f7c30698fc768679b1a6d16283471b7a5727557ed57cc33a931e0926ef","bytes":746,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_atm_loup.yar","name":"crime_atm_loup.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d64845646433c46ed46c6ed5ea4f4ed1ce010ff1e8f3220a28fec4e343b89224","bytes":757,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_atm_xfsadm.yar","name":"crime_atm_xfsadm.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4f6b3e77e03c282bbd9a72e6bf5de81c6ad01549ef68256a28b718ab32321ee6","bytes":1003,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_atm_xfscashncr.yar","name":"crime_atm_xfscashncr.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2f5f01c544e0d65aeb3e4c8b4aeb74ae29995a0c3c5ce6126fce7d4f8bb51c2a","bytes":1077,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_bad_patch.yar","name":"crime_bad_patch.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ff3d864fc71152a9eab80b6c139fee63054ce9fdfbe4c312a2a01bb8cbe35516","bytes":3509,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_badrabbit.yar","name":"crime_badrabbit.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1bff4ed6414702a28b4452135b9171d7c1190aa1d63ac15dc4b086c0360b4d45","bytes":2720,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_bazarbackdoor.yar","name":"crime_bazarbackdoor.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"05b3ddf4032d075db1ea5977f6eac0ae8ead2a651551a3938835cbcc829353bc","bytes":1347,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_bernhard_pos.yar","name":"crime_bernhard_pos.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3a06fe0885470dc820826016b55f5bd4728d1968a0d08da057982f83bc794e98","bytes":1256,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_bluenoroff_pos.yar","name":"crime_bluenoroff_pos.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ec639054f1c59674a285beee69666f0583f2b096c77a91ddbac48703df12d339","bytes":741,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_buzus_softpulse.yar","name":"crime_buzus_softpulse.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e380fe5e1e92c432967c7769fdb7819ab053e0d4f2aa99b49bbb30d3320d5c3b","bytes":801,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_cmstar.yar","name":"crime_cmstar.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6c65cf72c47c5b8c99e3ca5f3a724eeb2f2d65cb553d341250944beb983e0037","bytes":590,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_cn_campaign_njrat.yar","name":"crime_cn_campaign_njrat.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"eb5c61a6bbb14a632105287ede03d5ff67fa0402e17a40277dc165ada44963ef","bytes":6981,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_cn_group_btc.yar","name":"crime_cn_group_btc.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4c634fe3f877b581b929b165c00bd68ac373899a2163fda3774c41a27ba2e8aa","bytes":2550,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_cobalt_gang_pdf.yar","name":"crime_cobalt_gang_pdf.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a7f8dbb87e59aee46e4ca78bf7910b259941ccf84223295331b31b325ca1a442","bytes":555,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_cobaltgang.yar","name":"crime_cobaltgang.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f0cd03747f75fc1a1e4ceb63dd0767a4b0983c7fbd86dd966a244cf323ed4db7","bytes":4219,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_corkow_dll.yar","name":"crime_corkow_dll.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ef17a4daae32f4eb56108c25af493c5f83f0db391cf41a63acd087cf5c59bc64","bytes":957,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_covid_ransom.yar","name":"crime_covid_ransom.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e7a520bc873b320e4ccc9e3b8fbc047fa6107d7879a8d844aec04685e48d086f","bytes":756,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_credstealer_generic.yar","name":"crime_credstealer_generic.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1c93bd7fc65421432620cbbfeafa6d51e7be16287ddbb9dedb9646cc68e9fe8f","bytes":1216,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_crypto_miner.yar","name":"crime_crypto_miner.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a9bc0e768fadacf17116ebd2e5c5bd267a651dad03433b0effa733f8920e54ff","bytes":1324,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_cryptowall_svg.yar","name":"crime_cryptowall_svg.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c98bab03b09eaaae0204bbbcf7a8ea0a4be6ee6b7897ab741728a1c97e48fd91","bytes":726,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_dearcry_ransom.yar","name":"crime_dearcry_ransom.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"aee882406772826c2aa26988cb8c1c8decc8ad9b61dd73380c6e323ddf01c34e","bytes":2683,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/crime_dexter_trojan.yar","name":"crime_dexter_trojan.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b6e175f5a3c610c24f3f93476cef7d73246299230a1a9e1613190daf9de6c57f","bytes":584,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/crime_dridex_xml.yar","name":"crime_dridex_xml.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ee8711b5e8a719e7bfa7c2cd5f30fabbb1422c0b1ea0068593209156579b03c6","bytes":932,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_emotet.yar","name":"crime_emotet.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"515869fa046299535d06927abe835c576c276b192b3739f83c2595f5ae0fd276","bytes":4649,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_enfal.yar","name":"crime_enfal.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b4d814ef48a6730c5033fd8c5b6f38baf2e54cc83d33ce459cf34ee4a6d0aca0","bytes":1978,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_envrial.yar","name":"crime_envrial.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5eefbce601a784df32b0720da8108eb9eca1fd165b954f2563a44e280f37fe1f","bytes":1558,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_eternalrocks.yar","name":"crime_eternalrocks.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"be58babccc2e109a2a6efe8eac3872d54f07b2f9bda51bcd4f043f2a48ba1163","bytes":1855,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_evilcorp_dridex_banker.yar","name":"crime_evilcorp_dridex_banker.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a045b642432c9a1d5586e1bf4e2e4be993622acae6f14619243b08a35fc17f6c","bytes":881,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_fareit.yar","name":"crime_fareit.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"268afb931800e0389124e83e5d76cd0a172f65e0bf76a09d485703066c7a4e94","bytes":1164,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_fireball.yar","name":"crime_fireball.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"13bca5ff8df2da1aedf361c1fbafaa791a2354e19253b7aa4331c0e2d3a6aa2a","bytes":8076,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_floxif_flystudio.yar","name":"crime_floxif_flystudio.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"25619ffe3f5944ab823505a92c6a6ea87b055fd4b490aa09eea7c6c015b47829","bytes":1402,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_gamaredon.yar","name":"crime_gamaredon.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"589b3cb85e63c02d34a45e3d7da3e9e67c0d367532a2be8629902d07678e194b","bytes":874,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_goldeneye.yar","name":"crime_goldeneye.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c619d42f6456f991725a9f47423c7088bb7f33fdc5a855469053a0e7d8deadf8","bytes":1598,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_gozi_crypter.yar","name":"crime_gozi_crypter.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5245c7114927305f720d732f847beb16c71af67a5e3ac66c9f778a6342d94ffd","bytes":434,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_guloader.yar","name":"crime_guloader.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4572f9f9e3606e331faf434973a5bd6a75b56b697156f6fdc151711342d311e1","bytes":1071,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_h2miner_kinsing.yar","name":"crime_h2miner_kinsing.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fc580f3fdb553cb41a94ca29ad15c059a25644b00f2dabbe7f5faf135c5ad42f","bytes":610,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/crime_hermes_ransom.yar","name":"crime_hermes_ransom.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"dbb2876b36865fcf629f94cf18ba7c85b6f139f46331df27d729095610f8bdc1","bytes":989,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_icedid.yar","name":"crime_icedid.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2576ca0c24b59abbe035105b2e351c38673cf1a6310cc636f5a2068456f328f4","bytes":3424,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_kasper_oct17.yar","name":"crime_kasper_oct17.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9fd10eadaa6b9e4373fa548c40c747a0c99b6578149e2afc8b0490f85966d537","bytes":929,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_kins_dropper.yar","name":"crime_kins_dropper.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9a895e31c65591d3a15f20443e1cf7e99a677735d397cc23e3b598f0c776d4b2","bytes":1591,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_kr_malware.yar","name":"crime_kr_malware.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"05cf97ce14d5df9ee0333bb422e6163b585bf91db5f34a9879e3cd8ed09ac6ae","bytes":1341,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_kraken_bot1.yar","name":"crime_kraken_bot1.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"aedeafd0a533ae7099cae1fd0a7f69ef727d77a824352213c9e94a2251ff10d7","bytes":867,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_kriskynote.yar","name":"crime_kriskynote.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e7b03d0193b447e18c7137a947c24aabb31d98c9e604e9a9ab47d8391c2674c5","bytes":2531,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_locky.yar","name":"crime_locky.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"429ac47d433dd2dfb16924fbc7e4254237b56ab38f81666fb15346ab14ab3ce8","bytes":612,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_loki_bot.yar","name":"crime_loki_bot.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7b2755d48cff6f82d652298e2013dd94b5c1c142bb6a906c95fad61234bd6305","bytes":1862,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_mal_grandcrab.yar","name":"crime_mal_grandcrab.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a726d5c85237b4f40d69c4a3de9207ac23510d9b6fabe1fbd1d80d1a36d3018b","bytes":607,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_mal_nitol.yar","name":"crime_mal_nitol.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"882ffd622ffbadca01a4b47ffe85528f87c351bfa517a8e14b3c7fcb37ab75e5","bytes":1241,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/crime_mal_ransom_wadharma.yar","name":"crime_mal_ransom_wadharma.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d435a8c6347c4a618937f85bc5192738d9e6d68e3a535c031a0a4bd27d13a1b4","bytes":455,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_malumpos.yar","name":"crime_malumpos.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"29ac7b184ff1af96d2d5aef103dfd44e377fa0f7c5d37dac45c7983fd3cbfc15","bytes":569,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_malware_generic.yar","name":"crime_malware_generic.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"93b1c9d8e841b27018547854dd683d04ddb507fe95aebfcf438e40fab2b74b17","bytes":4338,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_malware_set_oct16.yar","name":"crime_malware_set_oct16.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3019f37b5aa5bb88c72ad417b37200818479609e671ceaec381b12eb15365db3","bytes":6826,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_maze_ransomware.yar","name":"crime_maze_ransomware.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"efc919e68025126e8dfc39bd6465ef2153e07a8e9be2ac739787a91e116e1235","bytes":1068,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_mikey_trojan.yar","name":"crime_mikey_trojan.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"21d1a61157d48d59f8e2cdf11e3b47dbcc9b65522ca138c29286395ad0b2e160","bytes":918,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_mirai.yar","name":"crime_mirai.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d33bc05b7c620c6ccbdba36d4aa70c247c456e8deb67590cf9ea4104e7f285b9","bytes":7204,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/crime_mywscript_dropper.yar","name":"crime_mywscript_dropper.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a43796e73963d7c13d9b3ca06e017b0ed84cd65adbf9d2f3b256a278b1387d71","bytes":1018,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_nansh0u.yar","name":"crime_nansh0u.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"325d0f14391fb7759280ef8a5763a577dbefae1aa475d1f43a8362772ddb1b49","bytes":5427,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_nkminer.yar","name":"crime_nkminer.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c12340728af7cb6ff3dd03694af778e21b28a6e8e108549e2e300396b40f2b23","bytes":1706,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_nopetya_jun17.yar","name":"crime_nopetya_jun17.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7e3efd2fb3d1aa2b4c5294f583785ffa246e1559cefc7f8c248178c122a61f0e","bytes":2023,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ole_loadswf_cve_2018_4878.yar","name":"crime_ole_loadswf_cve_2018_4878.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"969993b3c752f15bf818060d82eb7386ff833ce3fa2de1b07f64a20a201bd09a","bytes":1266,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_parallax_rat.yar","name":"crime_parallax_rat.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"af94883d02f79a13b9360210564950a2470cf29406f92820df3ab182878f3c75","bytes":3244,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_phish_gina_dec15.yar","name":"crime_phish_gina_dec15.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ec22c728468eac4c05998f9bfa1adf0ec7f261d6735df21364a043dea608e6cc","bytes":3600,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_conti.yar","name":"crime_ransom_conti.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4a6887c48668c674603ac7aea2cdd8590b7355d20ac9984415f386542c1f9789","bytes":755,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_ransom_darkside.yar","name":"crime_ransom_darkside.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"27c4ca64188babd2c97016289696e18112a06a22466b1fef8b68298cc52a6c83","bytes":4722,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_generic.yar","name":"crime_ransom_generic.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d33a4dc9a76e60ffe0eaae30e0948e32103ef78bd61a0c4cec3bd9228cca7e71","bytes":1375,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_germanwiper.yar","name":"crime_ransom_germanwiper.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a5e476e28d33ec8b3a1f7acb80471370bb70acce2946100110899eaf3773cd62","bytes":1222,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_lockergoga.yar","name":"crime_ransom_lockergoga.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9ef897a53112344a4a84d102e6bc67bffac5e891dc3899c12788ecef299af303","bytes":1336,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_prolock.yar","name":"crime_ransom_prolock.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"88234945d6d8125a91de705e59cc82934b629e033088b5bfe4096c08b4b64328","bytes":1060,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_ragna_locker.yar","name":"crime_ransom_ragna_locker.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0118bf770772571528d6371108341cad332d496deb9f66fae95c1bd77c714954","bytes":3245,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_revil.yar","name":"crime_ransom_revil.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cb60913a70165b43998bd16838b5f5aefb977bda54975f62b96db95784b03f9f","bytes":1005,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_robinhood.yar","name":"crime_ransom_robinhood.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ab5696aae4d4bfb0e5e596e19f132d9c03e5ea15095c41255513ee98dae77354","bytes":848,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_stealbit_lockbit.yar","name":"crime_ransom_stealbit_lockbit.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a8561c273cde579dc6ff78f1707ded7a615ddb7e62dcddac8f4924d6bf4a4b5b","bytes":654,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ransom_venus.yar","name":"crime_ransom_venus.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"30fbe41b6301ccf01127e4fc43a6250bf664de08c4f1eb1b690d3340428e4207","bytes":1694,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_rat_parallax.yar","name":"crime_rat_parallax.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4f83b1e4c55cf8cd1c55b7c92b42a6dc516a822e92355f8dc8ed05d5c8b7b6e2","bytes":1859,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_revil_general.yar","name":"crime_revil_general.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5d7731f19ee26ea1a894670ba2054f9e37249718f0aa31d303a89786eabdca37","bytes":3103,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_rombertik_carbongrabber.yar","name":"crime_rombertik_carbongrabber.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a9ecb05f1aabf148277b54daa22c08ee08ab6daf0626a9c6b5f783e5a444352d","bytes":5072,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_ryuk_ransomware.yar","name":"crime_ryuk_ransomware.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f96d71f30b76bac028f8ea7f1e121c0d7d66e209684ac33fabdced32b1600b1c","bytes":962,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_shifu_trojan.yar","name":"crime_shifu_trojan.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0c6a74a7c92e7b5fdf666dcadb0a8d5c5b4a728f5e4471572173fe475c3a71cb","bytes":2885,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_snarasite.yar","name":"crime_snarasite.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3b97370e885c2df1e512c94542b72091c8d666e610fae4cfbfe6dda4057690f4","bytes":643,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_socgholish.yar","name":"crime_socgholish.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4f5e66679d221b10111647955507440307cc5427954163c6ffebb2c78d91d340","bytes":2684,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_stealer_exfil_zip.yar","name":"crime_stealer_exfil_zip.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ab95a1fd721e5b300b91124082fbcf544fb0e3b24eabc89c90d1d61a5d7aa39c","bytes":1273,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/crime_teledoor.yar","name":"crime_teledoor.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"92f3e04666ee8591c6e777e47f4f89bb8bdc0559b34fd1788272e4c0083a92c2","bytes":1290,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_trickbot.yar","name":"crime_trickbot.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d28f3afa406dc736a15e7a20fe7f6dda27f4cb2d8b4737bb6961c78132cee4d3","bytes":4975,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_upatre_oct15.yar","name":"crime_upatre_oct15.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d8c48e62d2f1dda014a4d581e1d80a57c122c4beb929f9d450c9ae6ef3003054","bytes":2109,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_wannacry.yar","name":"crime_wannacry.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b573bec4dabb1e94ebee0665393ed43fe2bb2cd17b8eb6cbc661f75901aa26c2","bytes":6116,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_wsh_rat.yar","name":"crime_wsh_rat.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"dd279d12567ed25c7224a8aa616fa5f75673e032a54612a19a63e63463db634b","bytes":716,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_xbash.yar","name":"crime_xbash.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d10cbdb98a0fce77ecfbd603fd3d23489f1fe148554a67a9694c6a9fc7528fa0","bytes":2837,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/crime_zeus_panda.yar","name":"crime_zeus_panda.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e28ba9599f5304ab6abe54aabd8705caa0c3d7e8bbdf2846ce3f59c8545a508e","bytes":1210,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/crime_zloader_maldocs.yar","name":"crime_zloader_maldocs.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"52786bdb6c4b2c2a62a2d0d197e8d1bd698479eb142d49be926bdf723974fac0","bytes":918,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_adselfservice_cve_2021_40539.yar","name":"expl_adselfservice_cve_2021_40539.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fe03253b90db12bf0dc08b689ae51729a77de9d5332cd4cb3f739477b2427762","bytes":1221,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/nextron/yara/expl_citrix_netscaler_adc_exploitation_cve_2023_3519.yar","name":"expl_citrix_netscaler_adc_exploitation_cve_2023_3519.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"857ea344a1d5bb7044dfb2b418b56438f3b77bc8a760bbffbbd4e36190c6ea80","bytes":4106,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_cleo_dec24.yar","name":"expl_cleo_dec24.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8b65f821f1a6b875632ee838f461dfbf01faa16d8f4a66b7a52dd7d0b690e1a0","bytes":10688,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/expl_commvault_cve_2025_57791.yar","name":"expl_commvault_cve_2025_57791.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1be1136f210dcda0652b065b0bce65536df4b9e58ed16bda0074f12f0abb7125","bytes":3807,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_connectwise_screenconnect_vuln_feb24.yar","name":"expl_connectwise_screenconnect_vuln_feb24.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"929fc886d2d60c6712c444dac4b3481b4384a01d09736a14cdffc064062a6397","bytes":14139,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_copy_fail_cve_2026_31431.yar","name":"expl_copy_fail_cve_2026_31431.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9c0e98c630b845c29506e8863eb6a57243930c6f51ec6b95237a51449e06c57d","bytes":5602,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/expl_cups_sep24.yar","name":"expl_cups_sep24.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4b367e1e27c1eb0f9b98b37697c9d683735edba25fcfe413339142501395bcd6","bytes":1475,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_cve_2021_1647.yar","name":"expl_cve_2021_1647.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f8ba1ec595c49b854279353a3df0a5f58c74c22e32429e77ba7c54e028972d8e","bytes":3077,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_cve_2021_26084_confluence_log.yar","name":"expl_cve_2021_26084_confluence_log.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"44a182482b114bfb401d9a7e2eb73dc097930c35fc878605a180923b2cc0eb64","bytes":1265,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_cve_2021_40444.yar","name":"expl_cve_2021_40444.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b0fa54eecabcec320a27d9187d0b701508116f5d9c981b42c2394f45bcdec67d","bytes":3990,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_cve_2022_41040_proxynoshell.yar","name":"expl_cve_2022_41040_proxynoshell.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"90ff7dc15908c68339dc722b86672c9c6529e66f7d729ef6ea25e9c31ae7077f","bytes":1065,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_cve_2022_46169_cacti.yar","name":"expl_cve_2022_46169_cacti.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1c075dd0bd5053dc7d1ea36c5fbccadf7266aaab7af2aae8d00a8dc0d764cf6b","bytes":585,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_ivanti_epmm_mobileiron_cve_2023_35078.yar","name":"expl_ivanti_epmm_mobileiron_cve_2023_35078.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"16eacd742044534abc3e84c68c551c64a200c142065368658fa804784fdc24ac","bytes":2042,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_keepass_cve_2023_24055.yar","name":"expl_keepass_cve_2023_24055.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2155d5a7a91f257047cd627175316d3ac7167783fd220fec789290cd4cac9c64","bytes":1334,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_libcue_cve_2023_43641.yar","name":"expl_libcue_cve_2023_43641.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8c954548bbf54cc3f2d2b739bb82c9d2ae9e8ee9ac17f95b8667ab4e69bf5d8c","bytes":577,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_libssh_cve_2023_2283_jun23.yar","name":"expl_libssh_cve_2023_2283_jun23.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"585b92f3dfd7610bbc31a91a652281603fe185031c0640f5d27246bf1eb5653e","bytes":610,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_lnk_zdi_can_25373.yar","name":"expl_lnk_zdi_can_25373.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"36a3e1b96c0606612d81440e485ee7dec03f660eb8a1bb283cb36d881096fab3","bytes":2585,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_lnx_dirtyfrag.yar","name":"expl_lnx_dirtyfrag.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bd187bb311d377f28db0c843374926cf6bac20c461457869f85dfe3321884dc5","bytes":2837,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/expl_log4j_cve_2021_44228.yar","name":"expl_log4j_cve_2021_44228.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a564d69c72023245a6ff71fd62dafbc6f34ba36b119aa505ba5213f45b458db0","bytes":8187,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_macos_switcharoo_dec22.yar","name":"expl_macos_switcharoo_dec22.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"84d6bd8650c3815f0b316b590c1c0d90fbf577ea19a64a4992f1b8e76519c1d4","bytes":2634,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/nextron/yara/expl_manageengine_jan23.yar","name":"expl_manageengine_jan23.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8f45503cd760976b69c3d18b5c91b6c1f4e6d8efa3732ccc60feb5f9e78a0df0","bytes":551,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_outlook_cve_2023_23397.yar","name":"expl_outlook_cve_2023_23397.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bc620241101a6d06b4a79dbb344ef9af4e55d0bdcbf4cf289675782ff6f2540b","bytes":5296,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/expl_outlook_cve_2024_21413.yar","name":"expl_outlook_cve_2024_21413.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a5590aa6c5047ec335bdd04639c5edbcc6c530a90798173ef24a3329ef98f786","bytes":990,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/nextron/yara/expl_proxynotshell_owassrf_dec22.yar","name":"expl_proxynotshell_owassrf_dec22.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"63375972f88a909b2edef84cc9869cb3cc32b75d5be09f67910f81433e3608c0","bytes":3996,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_proxyshell.yar","name":"expl_proxyshell.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b6c0a05e053e6fdedbff3e03c02fae0cc2d5bd73d262cbfe822861f30f0ff8be","bytes":11595,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/expl_sap_netweaver_apr25.yar","name":"expl_sap_netweaver_apr25.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e988bfb93ef1453f3cea2e82f914ac764494cea9a01b51f695ac941c12ce3fe1","bytes":1628,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_sharepoint_cve_2023_29357.yar","name":"expl_sharepoint_cve_2023_29357.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5513e8732751d83fc83105ae0391a4f0582de015150035631e3df1543ddb2a7c","bytes":2223,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_sharepoint_jul25.yar","name":"expl_sharepoint_jul25.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7e3013d7d406574920e8aff47f38f1435fa89132d13bb7428f8b8215103a88eb","bytes":5006,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_spring4shell.yar","name":"expl_spring4shell.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2fe4f072c65ab34b731fa6ed09ea8d1074a9efe96f99cf7a586eff335d35e202","bytes":1976,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/nextron/yara/expl_sysaid_cve_2023_47246.yar","name":"expl_sysaid_cve_2023_47246.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"20ee103efa51732cfe06ac59fe87bb0ad39270f96191ae4681b15903472fbc14","bytes":2563,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_teamcity_2023_42793.yar","name":"expl_teamcity_2023_42793.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c3b5f6bd04164332897bf4a56db13e90fcda9953bfe18f5eff2c2085e0c1debd","bytes":1313,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/expl_wsus_cve_2025_59287.yar","name":"expl_wsus_cve_2025_59287.yar","category":"expl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"daeafa73fcbe5a515c04f4baf6d680b6bf1b4356a3f4d7328072948cf210c7de","bytes":2468,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/exploit_cve_2014_4076.yar","name":"exploit_cve_2014_4076.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0bb694b2f7c1d06d9d4a76c9fe7f33fc7ae18e6a52c304af1c65237574028041","bytes":797,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/exploit_cve_2015_1674.yar","name":"exploit_cve_2015_1674.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"69ea26e366c0e238d4ffd89c033c4123f15f5441c75d7c88ef5e7a3f63bd721b","bytes":843,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/exploit_cve_2015_1701.yar","name":"exploit_cve_2015_1701.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"06507258b5474f53ca39444fed5b6143549639d77fef25313b7c27f88207d185","bytes":971,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/exploit_cve_2015_2426.yar","name":"exploit_cve_2015_2426.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9746dbf42ad1980f6295fb0f91765b016f332cd100f120abb474484f1a022ffa","bytes":2530,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/exploit_cve_2015_2545.yar","name":"exploit_cve_2015_2545.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"db5dba0b55ced2bdce75a6875bc3a99e1d94bbecc9e07eefa4ec98ff823d546c","bytes":540,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_cve_2015_5119.yar","name":"exploit_cve_2015_5119.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c610d8058613cbc1f5865434fafe15ae97979acb70a7016d5a6b969787ebc973","bytes":816,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_cve_2017_11882.yar","name":"exploit_cve_2017_11882.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b1984d2a46ff53ede518f10412ab80a04501c771a914b370a7e2ac57fcf9467d","bytes":4795,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/exploit_cve_2017_8759.yar","name":"exploit_cve_2017_8759.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1ce5993e5f5761be414a5f7f7762a29d40ea9f705ea8e40e1dd3e4e9dac28fe3","bytes":4472,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/exploit_cve_2017_9800.yar","name":"exploit_cve_2017_9800.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"022c6010e45e61181f93dd745bef879f1864bb0bf306936444c6422445dcd310","bytes":621,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_cve_2018_0802.yar","name":"exploit_cve_2018_0802.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b0a38a185d5a47b759363512ff41b074c4f179fac5a81b793b9b7d3110e9c049","bytes":458,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_cve_2018_16858.yar","name":"exploit_cve_2018_16858.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9a642cd87b7d4453e944de41db8b509ee10d3781b43fbec77724b776ec05bdbd","bytes":776,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_cve_2021_31166.yar","name":"exploit_cve_2021_31166.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"69f49dae3cbdc423f2b44502fd96d9fb9cbc16b1a54de88713071392da36fb9b","bytes":505,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_cve_2021_33766_proxytoken.yar","name":"exploit_cve_2021_33766_proxytoken.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"50ffe9eeb70c331ff14c199be7a46f5de1a65ca38a2d1fbe7fb9e5f30f53442b","bytes":724,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_cve_2022_22954_vmware_workspace_one.yar","name":"exploit_cve_2022_22954_vmware_workspace_one.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"acd319e16c27d8a78487712abc7edae83327d5af6f8e11dd9fac571506175b41","bytes":2382,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_cve_2023_38146.yar","name":"exploit_cve_2023_38146.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"74c14f51357fa7eda2e6bb080f1cb3ce8b9af46c3395865c3ec965731389d661","bytes":496,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_f5_bigip_cve_2021_22986_log.yar","name":"exploit_f5_bigip_cve_2021_22986_log.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a823ceffda6a1143189ef285e2b2408d8b3b819a8176d982cdf8ef7073587905","bytes":781,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_gitlab_cve_2021_22205.yar","name":"exploit_gitlab_cve_2021_22205.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6963991f9efb90fde3d6e3083d2ad5a70c5d5a6255b697cb83ea2c4d84595d59","bytes":1529,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_rar_archive_with_path_traversal_aug25.yar","name":"exploit_rar_archive_with_path_traversal_aug25.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ee446887ffb2dfdb22bddc8f9d0469a6abc8675f7c853be426cde1a7da09a24f","bytes":1296,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/exploit_rtf_ole2link.yar","name":"exploit_rtf_ole2link.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d92d30eca5e80aef72d4674904e185592c0e1ebf5d1db9fce3b118b1f3ccd441","bytes":798,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_shitrix.yar","name":"exploit_shitrix.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c1fb88018dfe4be1090192075c17b5c9e8e5326f12dcafd3b60f499402859eb6","bytes":1434,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_tlb_scripts.yar","name":"exploit_tlb_scripts.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5ffad999aa2eda6aecb46661fdc890cf019b00137a96c80c097f91e92b00f690","bytes":713,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/exploit_uac_elevators.yar","name":"exploit_uac_elevators.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b01192352f7d088bd8991d41164142b0d7f9efea6dd8560135ff0172b1eec435","bytes":6982,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_100days_of_yara_2023.yar","name":"gen_100days_of_yara_2023.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"42e693959f121bdcc0f4794c0d7ea8e0117685306fb91a009f815bde19314d56","bytes":8409,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/gen_Excel4Macro_Sharpshooter.yar","name":"gen_Excel4Macro_Sharpshooter.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"364a8fb68cfa56ad4f9e37ab846017c86ba73a020b7dd38da2057e5766d33b39","bytes":3080,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_ace_with_exe.yar","name":"gen_ace_with_exe.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"079c297de80bd3906eafc3d705a2725ec323e5a437868d423e0fd33882d93982","bytes":612,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_anomalies_keyword_combos.yar","name":"gen_anomalies_keyword_combos.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a21e505c7fe81c775380f2aa94fe21fe04e4a442e80ebfe0798947d7877256fd","bytes":1331,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_anydesk_compromised_cert_feb23.yar","name":"gen_anydesk_compromised_cert_feb23.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"330ba363992892ec8547913eb97dbaa2f19b8663180f0a07780b979aa64d652f","bytes":3473,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_armitage.yar","name":"gen_armitage.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cbd67fcd107db1e6f614d5cb8d3df85bfb6c1d32793c8efa7127d095fe10a5eb","bytes":2385,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/gen_autocad_lsp_malware.yar","name":"gen_autocad_lsp_malware.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9a1fbe7b36412a2d5acd577558083997e12bcc256f4b169ea4e32aac5fa79de2","bytes":2827,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_b374k_extra.yar","name":"gen_b374k_extra.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f71129aa36b534d60e71fb6068df2000b6dbe6e76b834467b529ffce5b6694a6","bytes":732,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_bad_pdf.yar","name":"gen_bad_pdf.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"31113aec43265a7c1a12944a9589eaf2b2e7093ac05fd55ac0b562d80778b1ae","bytes":572,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_case_anomalies.yar","name":"gen_case_anomalies.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"445202a9476da9ebe0844fa12f5352de0b7d4fb1b364cbcebb61cf6d0b869c68","bytes":3210,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_cert_payloads.yar","name":"gen_cert_payloads.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ba0931f1654d718d0146e731b02790bc2bfccdc029f569ea5117a94699324859","bytes":748,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_chaos_payload.yar","name":"gen_chaos_payload.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bb7677aa0dfe01e8a46cd1453433da227bae78850ba7f7faed1d98135d157f1c","bytes":951,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_cmd_script_obfuscated.yar","name":"gen_cmd_script_obfuscated.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"440a5886184dad7cf4159e5341ad4f1974c67c273ba0b6be84420a0a315e48ec","bytes":735,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_cn_hacktool_scripts.yar","name":"gen_cn_hacktool_scripts.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6ea32573f85c63a2e270805d886a8e99faa9c1a903d9cb2c61f3298b21db565e","bytes":5891,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_cn_hacktools.yar","name":"gen_cn_hacktools.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"24a12ed9d44465772178a2052be1c5e575a5404f1a3f64bf869f3f27b2d9e29c","bytes":101677,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_cn_webshells.yar","name":"gen_cn_webshells.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4775d01a68755e57dd63d934d5277dd290d8bb11a6c88094913370140a4c5ea0","bytes":31923,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/gen_cobaltstrike.yar","name":"gen_cobaltstrike.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fc6960ab5d37100be47618a97307a68f2443292cfd4fbddd96226d55e700dac4","bytes":1893,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_cobaltstrike_by_avast.yar","name":"gen_cobaltstrike_by_avast.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"203a3cc1a742ca4abf0f8a365a328f74b3aa68bf68785b6551801ebc705f27ee","bytes":31494,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_crime_bitpaymer.yar","name":"gen_crime_bitpaymer.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7c5df0a3ef7e1cfc75cfc15e94b403f717a03549e723c2132a0c1b64ee063719","bytes":529,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_crimson_rat.yar","name":"gen_crimson_rat.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cbe4f0a7128955fcdd8f80d3a77a9ad3968237858aa7cf2ae83ff358e16696a6","bytes":1749,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_crunchrat.yar","name":"gen_crunchrat.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d1466dbed3cd7a5a1708cbc4c135d372cae0025b9e80ed253f7c3bc5c19d4cbf","bytes":943,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_dde_in_office_docs.yar","name":"gen_dde_in_office_docs.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"96f8e9090e620cc09d4afccd0b26c872a71c1953f35e53361fc515495bcf98f3","bytes":1941,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_deviceguard_evasion.yar","name":"gen_deviceguard_evasion.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"954f32c912a7a0ebd1d60c1338cd272c2e5cc7a634dfcd750e2f5ebc2ed700b3","bytes":540,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_doc_follina.yar","name":"gen_doc_follina.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b3878dafabc74806e83d6dbd0e8f32f1cb352b451cdf4f9e3cdb1cacbbbf44d1","bytes":9656,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_dropper_pdb.yar","name":"gen_dropper_pdb.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2e7ce616b86f808265439c35dab256ae81c86ca5e4ef2d4dc5af71e458520e76","bytes":597,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_elf_file_anomalies.yar","name":"gen_elf_file_anomalies.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bf6701ad6fc1dcf3b8f85e5faf48f0945a7aacbb6a5a5642b9d8d20449197ed2","bytes":748,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_empire.yar","name":"gen_empire.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0b96f2718369ba56d1c302db218938fafc0dc1053ec35f369f5516b5f372039b","bytes":29254,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_enigma_protector.yar","name":"gen_enigma_protector.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fc625f9b40e979b41c0869471d77e5785325fb034e7c6dee61bd650fd550c0b5","bytes":2103,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_event_mute_hook.yar","name":"gen_event_mute_hook.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"246c7ac3322544958c4b1c43534e668b77df2139957224841315ad1291cd8680","bytes":713,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_excel_auto_open_evasion.yar","name":"gen_excel_auto_open_evasion.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4bd99247367569650f5a871142f02eb6aea5081b9f1b215e76cfedeaab9b71c2","bytes":1280,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_excel_xll_addin_suspicious.yar","name":"gen_excel_xll_addin_suspicious.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b23d78c3b7ce6a7f90796b0e0761893e8933823d6a7b7308a724e2cbc76f2079","bytes":3473,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_excel_xor_obfuscation_velvetsweatshop.yar","name":"gen_excel_xor_obfuscation_velvetsweatshop.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e237f59771a7d3deb6eef0e553e5076d0d929e0741c99c74fc644bf98bdcda6e","bytes":1205,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_exploit_cve_2017_10271_weblogic.yar","name":"gen_exploit_cve_2017_10271_weblogic.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"22b6d223694eefac7a9ce644e1ff567f1b26b3c90111948ed1d443639df39405","bytes":1148,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Android/Java"]},{"path":"rules/nextron/yara/gen_fake_amsi_dll.yar","name":"gen_fake_amsi_dll.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"35743cab69e5df774e5966ecedbc90ad94dbb929677a502c63e16759c9259389","bytes":2325,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_file_anomalies.yar","name":"gen_file_anomalies.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"34114a3f7accd7eb93f49a051f638f46d25ed1c2cdc68f9106866c2d8c427081","bytes":4066,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_fireeye_redteam_tools.yar","name":"gen_fireeye_redteam_tools.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ce7bc60872a68bf6c085982f63c1f442053951651020e6d62118034fb134b7dc","bytes":215885,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","macOS"]},{"path":"rules/nextron/yara/gen_floxif.yar","name":"gen_floxif.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c0745a4346b6af39c5122c18068c80e29fcbed3366b4010fa48f0b05db772644","bytes":717,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_frp_proxy.yar","name":"gen_frp_proxy.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"acd8f5dbb71cc21ac96e7f4333fa96f97a01161e111e4ee46d063e2472bc90a5","bytes":1485,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_gcti_cobaltstrike.yar","name":"gen_gcti_cobaltstrike.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0f23b573e80b46b14a237a9fd13d4dfb72c1dfacc4fad1d0b02fa505ec6aa26c","bytes":161039,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_gcti_sliver.yar","name":"gen_gcti_sliver.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bc6a5061eaa2c6b4ab3d6723274c8b5e1f13ce64f38c8acff84e55fc15a0d141","bytes":5296,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_gen_cactustorch.yar","name":"gen_gen_cactustorch.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a50ff1e0814944032c4eab3e9acac1c5f8ba5f1be51858898c369f5bd3cfa27b","bytes":1904,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_github_net_redteam_tools_guids.yar","name":"gen_github_net_redteam_tools_guids.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"11625b5d1b9d32e8a11af8e77785082270814ce6ed625235d30d05846037841d","bytes":226282,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_github_net_redteam_tools_names.yar","name":"gen_github_net_redteam_tools_names.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"140990918baa4b5faf7554bd611520746119f52eaa4778101c95c9ff2e7584ed","bytes":33424,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_github_repo_compromise_myjino_ru.yar","name":"gen_github_repo_compromise_myjino_ru.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c2ccb18b12b55ff42f795647c0e6a71d1378a2dc0bbc2c1b01e04edd522e6369","bytes":581,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_gobfuscate.yar","name":"gen_gobfuscate.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f9042ed9a390386217989e31079a76f2d9cb8f19533bd392fa0e509af56e3e1a","bytes":818,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_google_anomaly.yar","name":"gen_google_anomaly.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7d2fe82901ac9880aa9aaa0aa12efc5f9e74b7724f25924f4c9d96b76f405374","bytes":823,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_gpp_cpassword.yar","name":"gen_gpp_cpassword.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c9aecf6fb5ab4b1b1e85ff4c0735d283ab1eaa1472f1d7a7cb8a40abd0e96b17","bytes":814,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_hawkeye.yar","name":"gen_hawkeye.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a3ba49e6f7c18a8fd7687bd62fdf686a124771b6d5cf672f4d9ca5e2df68ea8a","bytes":1205,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_hktl_koh_tokenstealer.yar","name":"gen_hktl_koh_tokenstealer.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"03ad55ab8f84444402621c106db00dbcbe22d88b1f4f4eb0ff1160e929f4c763","bytes":707,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_hktl_roothelper.yar","name":"gen_hktl_roothelper.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"96b691dd89602d600d27fe2150d3443b08b37a419b062201ee2058c37d6ef43f","bytes":1881,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/nextron/yara/gen_hktl_venom_lib.yar","name":"gen_hktl_venom_lib.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3c878c0e170331bd044f52adc5cb820f88e473b79d7075773081b11a227f333c","bytes":1209,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_hta_anomalies.yar","name":"gen_hta_anomalies.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ee8bee912a3bdf9c1767c88805b0de9dc4a4b5add77a6efd8cb1b47f105f4111","bytes":1440,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_hunting_susp_rar.yar","name":"gen_hunting_susp_rar.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e86d7489e40ea4de78e2558cb1603e31e9f6a9af9ae1eea3b510305fbc2e3738","bytes":1006,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_icon_anomalies.yar","name":"gen_icon_anomalies.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d8ab82494ed861a5115be0f53df4d81ad110dc4c95f1aae5d9e4c7df6b2a90e6","bytes":3257,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_impacket_tools.yar","name":"gen_impacket_tools.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5added72a0cc1e4ee4e748c7e977c8a3c08ac78be0b2e956c5409fc7684b1b07","bytes":18396,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_imphash_detection.yar","name":"gen_imphash_detection.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"654abfb8bd3c4e2745bdff7f625122c1fd68536d067219b753b3e25bebd141f1","bytes":22321,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_invoke_mimikatz.yar","name":"gen_invoke_mimikatz.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"03e4100abcc558ba6a2f08a71b6532aac1ad86302efa4f2603199083de07eedf","bytes":905,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_invoke_psimage.yar","name":"gen_invoke_psimage.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"644f33a5f6cafbb34986488bf30e12d3bd974ba56cdc0fbcce1d52b18cab6f94","bytes":1228,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_invoke_thehash.yar","name":"gen_invoke_thehash.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"99ad47b7e348d532fd7470f6fca0cba9fc53cbc7dfb4d3efe96c3fb8915cbc7a","bytes":4556,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_javascript_powershell.yar","name":"gen_javascript_powershell.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"eccdaa17aa3ae7a228387253ffb360d5e7c6629f393f75e902d492e8c8d677d0","bytes":598,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_kerberoast.yar","name":"gen_kerberoast.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"206b0ed8c7d4e48b3a3fce43e1b40c5c34613ceba65861f87feeb25a73a81206","bytes":2592,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_khepri.yar","name":"gen_khepri.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f0a51179b6185b7e12f5c2090a50e57212d279372f088df01d60cd2a1404597d","bytes":1537,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/gen_kirbi_mimkatz.yar","name":"gen_kirbi_mimkatz.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7d6000ad4d3e78ec1e58352e83eaf0b934f666930c05c04fee9f38667d7bdbd1","bytes":680,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_lnx_malware_indicators.yar","name":"gen_lnx_malware_indicators.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"09b915860e82e373b501cb874699d74e42f04eb4c72a73edf85fdb01b02d3eb1","bytes":1034,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/gen_loaders.yar","name":"gen_loaders.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"39d47f9bf1c18666c6e2452c66040d88b6cab9c197410df6a536e56d23e419ca","bytes":6435,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_macro_ShellExecute_action.yar","name":"gen_macro_ShellExecute_action.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c1eba4861b25852040da78c6128358b3b3dc821c4e2b63b904752615262441d6","bytes":1559,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_macro_builders.yar","name":"gen_macro_builders.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e051c100d0c820249994aa8eb5b0c08ca96aa34c85f8e972ba33aceedbcd1f70","bytes":612,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_macro_staroffice_suspicious.yar","name":"gen_macro_staroffice_suspicious.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b7eab94e484c6bcc8775ad1f894272da67f5d330a147296f4ecdda137822f606","bytes":1754,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_mal_3cx_compromise_mar23.yar","name":"gen_mal_3cx_compromise_mar23.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d022cdfe8e4043fedb410b9e0c87dd08d72715405d50903bb4e0af03a32bc603","bytes":21534,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS"]},{"path":"rules/nextron/yara/gen_mal_backnet.yar","name":"gen_mal_backnet.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c42b56db87ec6bf3ea9c44a071bf4aa49788c1fe7fe261dd2397fddedaa751e8","bytes":784,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_mal_link.yar","name":"gen_mal_link.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3271d22e543e595ed3de9ee8a92b87cd5973f26f31587f44d13ea0dc133dc73a","bytes":1060,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_mal_scripts.yar","name":"gen_mal_scripts.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"70d3ca75a18758daa25cf50367fbf1c5da15b2c6b7ba0ebd5d6261d71bae8160","bytes":5889,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_maldoc.yar","name":"gen_maldoc.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7d01133da8d308d08386176948eb15a3225170d374490873517f73b5e39008b7","bytes":644,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_malware_MacOS_plist_suspicious.yar","name":"gen_malware_MacOS_plist_suspicious.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c57c5dc295619566960d62bcb1eb26ec82be3bf794faa6930e4b2a6a42c754cf","bytes":3431,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/nextron/yara/gen_malware_set_qa.yar","name":"gen_malware_set_qa.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c30bec86bb2491e72de0e53f4cd1d6a6303207c6a9f4c74551f27caeace4e972","bytes":6688,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_merlin_agent.yar","name":"gen_merlin_agent.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8f3db2354cf3f6ca7e5c5a20a96fdd5b8bae7c4f90261c4401c4c1e83813a25a","bytes":873,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_metasploit_loader_rsmudge.yar","name":"gen_metasploit_loader_rsmudge.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9442524f94ab3ee59ecec194985e8d4dababf821afaf91f3a96eb87c8466a0af","bytes":1025,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_metasploit_payloads.yar","name":"gen_metasploit_payloads.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"559cfb96f7f468a7108f621a3a2690c0e23115319205afdcc54f008243653df6","bytes":14953,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_mimikatz.yar","name":"gen_mimikatz.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6bccbaf608df05543515d8126250233d78b5bd7630a87f65f8614a32592a27c0","bytes":9304,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_mimikittenz.yar","name":"gen_mimikittenz.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a6bed14083bf2611ea2897dfbcecf322e5251ad843379ad28715fa0aa6811c84","bytes":1211,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_mimipenguin.yar","name":"gen_mimipenguin.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"660eb71be42dfbb43eb696479db9b2cacd64c936e05d0fb3d6e7a05495486793","bytes":2752,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/gen_net_xorstrings.yar","name":"gen_net_xorstrings.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"982e82e2e08c23aec1efbaeb6e3915d4324ae9e1bb3f2b57726758f475313808","bytes":851,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_nighthawk_c2.yar","name":"gen_nighthawk_c2.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c32cc59b6b0fbe1dd81123385ac0642fe993e59eeee14b696c5c7cf22e835d64","bytes":3299,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_nimpackt.yar","name":"gen_nimpackt.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f11614e3d292091a8e01e20daab03b9374c391fe7438f946aa273b412eed0114","bytes":787,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_nopowershell.yar","name":"gen_nopowershell.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9952cdafbaf298e5fd158e6a3769b882fc8e502866e346fb6b066cc3a6e5fa88","bytes":841,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_nvidia_leaked_cert.yar","name":"gen_nvidia_leaked_cert.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"22e038f97c16b5e209c9bca11138da2408f3436b47af9b582e3cf41a1ef13cde","bytes":945,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_onenote_phish.yar","name":"gen_onenote_phish.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1553e71f855c801b2420751117a6b25bdd49fbd926c79a733b2e0b7cc1785fbb","bytes":5098,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_osx_backdoor_bella.yar","name":"gen_osx_backdoor_bella.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5b81051b1dd3bc13aee6950dc491c7b000506e214643813c29be8d6fa259efa7","bytes":1498,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/nextron/yara/gen_osx_evilosx.yar","name":"gen_osx_evilosx.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9619326c04632047a37e8e1b437efc0f34d7cdd2919f119b7396a4a64fe46129","bytes":1440,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/nextron/yara/gen_osx_pyagent_persistence.yar","name":"gen_osx_pyagent_persistence.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1f2a26ccc89587cb01998ef1d38edb11a73cd6bee4e9f569ec9c3518f051537e","bytes":1858,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["macOS"]},{"path":"rules/nextron/yara/gen_p0wnshell.yar","name":"gen_p0wnshell.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8db8907f21fce67b54e74ac992c9af71d7c8d2c04a46da522950d6521346807d","bytes":8893,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_phish_attachments.yar","name":"gen_phish_attachments.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6fb48f2b60803ba753223c23e519d310553c42184afa6ba730525268e2deedc8","bytes":5035,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_pirpi.yar","name":"gen_pirpi.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"66b3972493daf565e31f8507b5ce28ac92327941ee1583527154d3339dd21fb0","bytes":2527,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powerkatz.yar","name":"gen_powerkatz.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"23b95a2079e0f37327ccbe35f166ee77ca2998ee7059c43ce2455569df58f472","bytes":1257,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powershdll.yar","name":"gen_powershdll.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"75646831ce0f91a96260f3f1aadc95e598e88bad53327c301c3051c423005327","bytes":887,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powershell_empire.yar","name":"gen_powershell_empire.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"170c4342744d309da52948525222eee842502f15971a40bc47568929b8695294","bytes":9157,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powershell_invocation.yar","name":"gen_powershell_invocation.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cd4ee3ad4781995a9818ae5064482f354fff697ffea9251c370570ab0ca8c38a","bytes":3051,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powershell_obfuscation.yar","name":"gen_powershell_obfuscation.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cf7e5b2055dddac283708a68938f4ecf16fa879016a07d9f16c9e43bc92edb8b","bytes":2683,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powershell_suite.yar","name":"gen_powershell_suite.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"09e01c823ef9b94434b25894e0749577166d2f1d9edfe19d03126ac021260a75","bytes":3755,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powershell_susp.yar","name":"gen_powershell_susp.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"18f2c99b7213595b9a6cb28ae9993367957df0aae73664dd4d9f2008601d943a","bytes":11782,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powershell_toolkit.yar","name":"gen_powershell_toolkit.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"02e21c178948b59a33b29c0c892fb5ecf5125226a20219b33f919a99922ac487","bytes":12681,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_powersploit_dropper.yar","name":"gen_powersploit_dropper.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cef8de29a755fc5b51ccbee8ad568bde33ad70aeeaf0164f89b1c6190c95f08d","bytes":685,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_ps1_shellcode.yar","name":"gen_ps1_shellcode.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f0b2f53a50a8cd79d283ba029cd6de1cef107c499e7cce6853f41a06d57185d6","bytes":473,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_ps_empire_eval.yar","name":"gen_ps_empire_eval.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"edeec2460b6da457d55192c00a0cc904531f868f26c38b36b75cadf0b2ace73a","bytes":1496,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_ps_osiris.yar","name":"gen_ps_osiris.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"557bc6f67b63ecbebaa4646efb031e1b83997c2422481791e233fd9c15582f7e","bytes":907,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_pua.yar","name":"gen_pua.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"14690c2069f08a444875dac97da85dcdd4424a377102bf94a7f8678e78132254","bytes":1017,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_pupy_rat.yar","name":"gen_pupy_rat.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2e41be33b023d591f297d1740591ec377f0718c296bf1c844b56fcba708cf83d","bytes":2090,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_python_encoded_adware.yar","name":"gen_python_encoded_adware.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"29d3b5122b39951fdc68ec31fa3a6d778314ee6195e07bd7ba0a039de6c0a7a5","bytes":696,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_python_pty_shell.yar","name":"gen_python_pty_shell.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"089d34f2cec574a86a886947eb6f2682e0a09565612ccaab5e366be06c9116b4","bytes":704,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_python_pyminifier_encoded_payload.yar","name":"gen_python_pyminifier_encoded_payload.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e0d4d211425e73939304070569d470cf749cb61ea0ddbc3705a13025fd7341f4","bytes":1355,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_python_reverse_shell.yara","name":"gen_python_reverse_shell.yara","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e31e100bbcf061575f416331e956fc574713ac1414a0e6b44740e705053b1f46","bytes":1559,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_qakbot_uninstaller.yar","name":"gen_qakbot_uninstaller.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e574f8a03bdab5594e11e5f5fcf2ac4abdedc5628ea572ca95a19c0a0c973a4b","bytes":1742,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_rar_exfil.yar","name":"gen_rar_exfil.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"89b5ccd9a9a5d29f19c408144f2ce0bbf6bc6116a2bdbdd9b68129001d2d4519","bytes":692,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_rats_malwareconfig.yar","name":"gen_rats_malwareconfig.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"504fc7263759d9e740d17736962b587bbebc4d5747a1f52fc337459bcf0abe93","bytes":25468,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/gen_recon_indicators.yar","name":"gen_recon_indicators.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"baeb6cedf0e9e6410b404b796f3149f2543907adba07c93be7daa71a0f43c9c8","bytes":2493,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_redmimicry.yar","name":"gen_redmimicry.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e3c0ad9dce76d4ca981323e42cb92d6d625f1086f80f9fd6d3bb0c204f553f2f","bytes":2851,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_redsails.yar","name":"gen_redsails.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7f5d6d15990c61ca6dba4fbc7b617a3fb5c3d8fa1414a0cab574374f1edec3e4","bytes":1804,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_remote_potato0.yar","name":"gen_remote_potato0.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3b8b535a6b478b36693840d7f597c1ad30dbbccc6736c9ccc1d4f86203ab672f","bytes":754,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_rottenpotato.yar","name":"gen_rottenpotato.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fe8e598a333945a04e0eea97e7eab148c9d9c3432862c31c75fea04aafc743d6","bytes":1482,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_rtf_malver_objects.yar","name":"gen_rtf_malver_objects.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c0c147cf3d300651cd82476f22c4de0bf46ed1482c5596661684289b60fb4f66","bytes":2490,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_sfx_with_microsoft_copyright.yar","name":"gen_sfx_with_microsoft_copyright.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b7fc8ead82df83c00ab8804f38c110fa1836b19512c3637f6d831a25f1745d89","bytes":2238,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_sharpcat.yar","name":"gen_sharpcat.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b1df29aa0856a33efb1a5fcc00fbb079e83d274840265406d119de1ee9bd38f2","bytes":732,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_shikataganai.yar","name":"gen_shikataganai.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"359c41ec2548e924ddff27a7b773e4cde54c1923ed220469db9ccde113871866","bytes":2493,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_sign_anomalies.yar","name":"gen_sign_anomalies.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"436a80379cd1003b449146443e821763002c8ba78ffb33730651610c53cf46b9","bytes":16182,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_bat2exe.yar","name":"gen_susp_bat2exe.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"69d3189ba55d30787501916c54672f3e3778e71f988ca5190e8fa924a7a71a4b","bytes":1207,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_bat_aux.yar","name":"gen_susp_bat_aux.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e6b08c582c6d146b30aa9384daeef1f5c45ed77f3d7ba33f2df2919a7d652745","bytes":780,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_cmd_var_expansion.yar","name":"gen_susp_cmd_var_expansion.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fe40c35efa29cbc7e47509b882b3395f8230fff3e8fcdf53e0641d116aa6b8d0","bytes":468,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_susp_hacktool.yar","name":"gen_susp_hacktool.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"97f497f17c2c356d879e0638ae65402cae95df7a7b903f60c1943f250d2c44b9","bytes":1440,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_indicators.yar","name":"gen_susp_indicators.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e0ea4945598a3dc9e982c8c3cf4edb158596d553dc65dbd220cd9c6fccd0a11e","bytes":871,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_js_obfuscatorio.yar","name":"gen_susp_js_obfuscatorio.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7984f1fc7fc340791e133e66c4e72abb6f4ff9b814d514aebec6590c3f26adaf","bytes":1035,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_susp_lnk.yar","name":"gen_susp_lnk.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"12963718410adeffb531c9a516812333cefde9516f3f39ec088b225ebecb065f","bytes":398,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_susp_lnk_files.yar","name":"gen_susp_lnk_files.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1ac2357774fe5bfaad5085e2383ae40348c1e860c846bde686696cbfca6cfbe2","bytes":2344,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_net_msil.yar","name":"gen_susp_net_msil.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c0414aefa1d0f96e45c4a7a2810365c230cf1db32c56f03a2a86bbf81533d7eb","bytes":995,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_obfuscation.yar","name":"gen_susp_obfuscation.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d1b954594fa4a9975cc016b956178c240bc49ae75a978aeafb53ecb4b510a733","bytes":6161,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_office_dropper.yar","name":"gen_susp_office_dropper.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7a5318c3b39b25125b5b2bf4e72709e3ff7462c2bb16954869ea619e3027bd9d","bytes":4969,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_susp_ps_jab.yar","name":"gen_susp_ps_jab.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"daa272f6c709b3d6814fbc493e069c5720addd38640e6f8fbaf4174cadf60b16","bytes":1379,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_sfx.yar","name":"gen_susp_sfx.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7687f6a3f4d3201862975ebcb7140805b1dd93cf29f1b611f4c86aae01eca00d","bytes":922,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_strings_in_ole.yar","name":"gen_susp_strings_in_ole.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5dba3dd17b39fba7a060dda7b4521a7a4f2d8ce1637e1e75c3bc70ff77287409","bytes":1113,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_svg_js_phish_mar25.yar","name":"gen_susp_svg_js_phish_mar25.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bb1cfa9b34f24dc6ae7b5273e294e68e6b893ea259862aeb75c71e63d16873d2","bytes":1667,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_susp_wer_files.yar","name":"gen_susp_wer_files.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"abbd869bf777ace5937f54063959c4082d3f1d18213110deaa0f05ffefd3c3e8","bytes":2081,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_susp_xor.yar","name":"gen_susp_xor.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f74f98644bab860042e6381399f10ab3da6cfbaed8724ac69f42b8223b79e282","bytes":1497,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_suspicious_InPage_dropper.yar","name":"gen_suspicious_InPage_dropper.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"66a7da05254973d3ffbedf98cdaf94a65bedc9a9941790b54b2d0315dd984e7b","bytes":951,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_suspicious_strings.yar","name":"gen_suspicious_strings.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6c80d832e67bda9cdf51a7eb111c6fb11cf189b493977a342c5a70686dfa5cae","bytes":17237,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/gen_sysinternals_anomaly.yar","name":"gen_sysinternals_anomaly.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d3c7837159d2266afdcb145fe65248a6a76efbbe110db66b7461539b693a6875","bytes":1090,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_tempracer.yar","name":"gen_tempracer.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2fe4eaf1f8e74910e6c3c57b08760b40171f95a2cf69b98f53a6497c9e5db7cc","bytes":996,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_transformed_strings.yar","name":"gen_transformed_strings.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"02472f988ca22dba3de84f815192e910ea6b25227b5b2629597a1a60f364df1d","bytes":1665,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_tscookie_rat.yar","name":"gen_tscookie_rat.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3f68a3d1fb5eee49a3ab7721d0b601c3b808f5a72ed27e9ef889a43b15268e04","bytes":1227,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_unicorn_obfuscated_powershell.yar","name":"gen_unicorn_obfuscated_powershell.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"92e3aba0208cdabfe96dfbfc4f26c463e292d7785163d0ed78634740f24ef494","bytes":1076,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_unsigned_thor.yar","name":"gen_unsigned_thor.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"76f25f48dd0dbb7538d601188a536d51f8d7de616419bb718b5737ed5cec1b54","bytes":735,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_unspecified_malware.yar","name":"gen_unspecified_malware.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ea532772d9e77004d3a898e94c8ca45f2c360f852a9c14c6baa99fe103fe9ee6","bytes":1175,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_url_persitence.yar","name":"gen_url_persitence.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3411ebf63c00143cc6af45f468b0819b34808ff0ba3587d1357974acd957468f","bytes":12120,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","macOS"]},{"path":"rules/nextron/yara/gen_url_to_local_exe.yar","name":"gen_url_to_local_exe.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e9a311b2c514294aaf31723e56a731c1aa0ec67cc25f2253b38699785c40334c","bytes":607,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_vcruntime140_dll_sideloading.yar","name":"gen_vcruntime140_dll_sideloading.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"49aec4ed31798769226b02e1cc05d5c651ae7a32b075dbf33ee5db2c18e04d35","bytes":1172,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_vhd_anomaly.yar","name":"gen_vhd_anomaly.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0ad34d1bd51f1a7e6019463affd95c3ae89b3b8083f2500a602c1ca83077b2bd","bytes":998,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_webshell_csharp.yar","name":"gen_webshell_csharp.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"caa53f6a4d6174d118912b36f6cbf6abecf2fa4f6d376899ab46a00454487e9d","bytes":1005,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_webshells.yar","name":"gen_webshells.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6876bdb29fe9cedc198d64b7e73d2d040c10918f47d40090b5d2ce1bf8c429d2","bytes":300178,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","Android/Java"]},{"path":"rules/nextron/yara/gen_webshells_ext_vars.yar","name":"gen_webshells_ext_vars.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0c9305c3b911161c3649aefcd778f81f1501acfad8ee02bc342e91bcd3fedf1b","bytes":4131,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS"]},{"path":"rules/nextron/yara/gen_win_privesc.yar","name":"gen_win_privesc.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"67e6d7472f139642fd8a1490011a2a4feb2f12effe0d44f4273fe1b51ec8b817","bytes":2793,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_winpayloads.yar","name":"gen_winpayloads.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8ae6f126c14f45b843c7311202436b778096b9570568e3d201e7ad83e7766dd0","bytes":2258,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_winshells.yar","name":"gen_winshells.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d2685da141d0ddf666db6704df2b2e72b72eb8a070aa0f4cce12fc6d2a5f5474","bytes":5410,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_wmi_implant.yar","name":"gen_wmi_implant.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"920b91a15d7e1dce78c56375ecea518649ae31ebe6ec4465f91c75a3444e8db7","bytes":1124,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_xor_hunting.yar","name":"gen_xor_hunting.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d7e42a77b37db514c6a7027826d2e83d627eda394010f5085236df0a5918359e","bytes":2325,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_xored_pe.yar","name":"gen_xored_pe.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3f72f78730662a2975f5965059d6064e78eaaa990a7bddf3a471b862927c11ea","bytes":1101,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_xtreme_rat.yar","name":"gen_xtreme_rat.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7284925149fb775b8a945c111baae420feb1cde91c6a1511bf0704edea61902f","bytes":3190,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/gen_ysoserial_payloads.yar","name":"gen_ysoserial_payloads.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a9d7a6547a3838498b7c1f197e94dcbfc5915fd2227707935778a5679ecf90b0","bytes":5107,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/gen_zoho_rcef_logs.yar","name":"gen_zoho_rcef_logs.yar","category":"gen","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"285ba1c06fa4e9062031a17402378c4e83cc15f661982cf680669ffe1b864614","bytes":946,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/general_cloaking.yar","name":"general_cloaking.yar","category":"general","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"514788a43d3aacef6ad89171033533905fae0aa07d5fccf8214cc9118e60628f","bytes":6206,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/general_officemacros.yar","name":"general_officemacros.yar","category":"general","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bc26368ac77fd8663f12867da0b6c1cbb884aa4ba0257d0a809cf7189182d2aa","bytes":2704,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/generic_anomalies.yar","name":"generic_anomalies.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"06f11942783e2cd0194435e907dda4fa40ef2f3e797d2ec3f8927b6b2a56471e","bytes":18869,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","macOS","Android/Java"]},{"path":"rules/nextron/yara/generic_cryptors.yar","name":"generic_cryptors.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"25568bfe50bb1f23916e602f8c8b267060173a9615c4cfd7ad66927670aeffa7","bytes":943,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/generic_dumps.yar","name":"generic_dumps.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fc314e7b5c393e86f4b2f7b194a1065a37853405c5f107cf05bd1c9fbcdebb60","bytes":2081,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/generic_exe2hex_payload.yar","name":"generic_exe2hex_payload.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fdb4b31835ba5193c1be53fb40aadebfb47218d2e9518eb97298647bb83b4312","bytes":808,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/hktl_HvS_nfs_security_tooling.yar","name":"hktl_HvS_nfs_security_tooling.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a646889907c9890160cbc0e0c63715accde88118871624f00b1e5fff8e3261c9","bytes":1959,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/hktl_adaptixc2.yar","name":"hktl_adaptixc2.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ffb43e5b8c5472d8c0a7fb28953dd3326779a1724f9300ac32c64c999c5217bb","bytes":923,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/hktl_badsuccessor_helper_may25.yar","name":"hktl_badsuccessor_helper_may25.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"63a546c1db9becd6611dd90b16ab3a691f57e47dd91306a984483fbabe4e3ad9","bytes":861,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/hktl_bruteratel_c4.yar","name":"hktl_bruteratel_c4.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1516a138c75954c8b4ffff17e3b0882b262ef793f51b840a38d65cc5338ce110","bytes":13421,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/hktl_bruteratel_c4_badger.yar","name":"hktl_bruteratel_c4_badger.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"23ad8f89a1a460b1c80a4cbf93ec98a515b084b3afef4a5df8b890b791646175","bytes":600,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/hktl_edge_pwd_dumper_may25.yar","name":"hktl_edge_pwd_dumper_may25.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d3beb8fdec0a492d006b92728131c03d516f07cdf95491490376fab5b8081095","bytes":702,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/hktl_edr_freeze_sep25.yar","name":"hktl_edr_freeze_sep25.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6f4b1b508bfc6150b6373ddf0f96987e8689b72f3a165106af46e06efdb80cc8","bytes":1525,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/hktl_natbypass.yar","name":"hktl_natbypass.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0f9933a9f4d902182e80918af66b6a807f82d8af2033f19d372d3aa24883df11","bytes":896,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/hktl_redsun_apr26.yar","name":"hktl_redsun_apr26.yar","category":"hktl","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e49ff96bee2290710c21976c77f734e24e567606e401d9fdff862689df88c3e3","bytes":884,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/htkl_blue_hammer_tool.yar","name":"htkl_blue_hammer_tool.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0a656395bc5129d34d997087c05992d25df0df0a3c6593122ff32cbf457fa390","bytes":1705,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/log_teamviewer_keyboard_layouts.yar","name":"log_teamviewer_keyboard_layouts.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8cbc27f492751748231b4f138d663bd7c0f6ebd56071ea23ea6988f9cd499ac4","bytes":1705,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/lotusblossom_notepad_exploitation.yar","name":"lotusblossom_notepad_exploitation.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8f1e35ca8d40b6b96a479456f48a4e00419cf2b1d50c5fe113959601dfbe9b67","bytes":4764,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_avemaria_rat.yar","name":"mal_avemaria_rat.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f880da003c17af4139d708dd38c9b992137f583b772cc857713565d518b8caa4","bytes":596,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_babbleloader_win_jan24.yar","name":"mal_babbleloader_win_jan24.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c73d6c6b3f65635522f5b89aecc28938ac1538ea36ac3ad5bf21cfdebd5f07e3","bytes":1712,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_bibi_wiper_oct23.yar","name":"mal_bibi_wiper_oct23.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1b5139c0e52a588a4b9508287d110e43b0ca5100633f48534d38d347efe269ec","bytes":1812,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/mal_codecov_hack.yar","name":"mal_codecov_hack.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"1f7dedcfbcfac2b67f62845a6455a56549b690627b11c8193502eb6033a55b4f","bytes":560,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/mal_coralwave_remcos_dropper.yar","name":"mal_coralwave_remcos_dropper.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8a0509a581ddb3e4d0bc27a640228ef80ae7542f57756bb4c2a402ca842d6767","bytes":1113,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_crime_unknown.yar","name":"mal_crime_unknown.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"58eb6a3e8d4a25dd7be947a938f1deb030beb85c869689db4ef20d616a585826","bytes":2910,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_crime_win_pe_godrat_aug25.yar","name":"mal_crime_win_pe_godrat_aug25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"3f733427b52b2aa1e1c15b26d49eb154ea5a42c42a53d8d12c893f8e7a75d0b9","bytes":3468,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_cryp_rat.yar","name":"mal_cryp_rat.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a6430d45e91368fb6c50583311b9ffe5dfe73eeb5ac9d366969accbfb74305a5","bytes":581,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_ducktail_compromised_certs_jun23.yar","name":"mal_ducktail_compromised_certs_jun23.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"47a1dc2d9f43243be5b4a32afb873ad73cedbcbd1f96586c0e22c83a8c711cfe","bytes":2270,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_efile_apr23.yar","name":"mal_efile_apr23.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"d600b4faf92ca7078876bdef77ca3fe9fec70f55bb85bdd45f87f37ecad13980","bytes":973,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/mal_etoroloro_nodepackage_dec25.yar","name":"mal_etoroloro_nodepackage_dec25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fd758a0cc5046b4ce07c5e669e08bc6615fabf458dac5d5436c998bb4eb4ba4e","bytes":1003,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_fake_document_software.yar","name":"mal_fake_document_software.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4b91c4ce5092a4747b4b2e1d66bb084102a9d259e76fc71b7315b9e22413ae1c","bytes":841,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_fortinet_coathanger_feb24.yar","name":"mal_fortinet_coathanger_feb24.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"00f9c3b49069e63efbf6caf87d337513ca4cba245af1bea2e901f465755f3138","bytes":1348,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/mal_go_modbus.yar","name":"mal_go_modbus.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"bc5679eb5a6a48b18403a89143a6abb7897b79c659930981b0b041de79fc2b08","bytes":839,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/mal_inc_ransomware.yar","name":"mal_inc_ransomware.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"aa815029ab15da9eca43b9e8257b0f836842702a670f07112e83c354e1529551","bytes":1485,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_katz_stealer.yar","name":"mal_katz_stealer.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"520cd4dcc1143323ab44ecb4b512b8d388cb69bf3fd343262aa841f67f00dd16","bytes":4591,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_kernel_regphantom_mar26.yar","name":"mal_kernel_regphantom_mar26.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4c4c79d70df159717c0e976d70fb62d088174edbbbd2f01ae3e45f0cc8790ccc","bytes":1120,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_lnx_barracuda_cve_2023_2868.yar","name":"mal_lnx_barracuda_cve_2023_2868.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e047e0064c0363f4e85a8cb340b9026ab4d6c9613c91ff6ed27e003a247e0d16","bytes":1533,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/mal_lnx_implant_may22.yar","name":"mal_lnx_implant_may22.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a012f2405bf620a7fe279848c7ff34b1da01fa163b403c6a6d2e01ec0669f1e4","bytes":10648,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/mal_lnx_plague.yar","name":"mal_lnx_plague.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fd157d0ab4c231659188874b6db0724bee2e2226ad4d82c6392a7aa6a92c8e56","bytes":956,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/mal_lockbit4_hashing_alg_win_feb24.yar","name":"mal_lockbit4_hashing_alg_win_feb24.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b5e50ce9706da890f03f1c94102ecad319a9d770c84db4c53f2140a5704a709d","bytes":856,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_lockbit4_packed_win_feb24.yar","name":"mal_lockbit4_packed_win_feb24.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b2093017b97e849aea680bcfa5c3d3ae19e0292b050871e70be2738fe87592a1","bytes":1565,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_lockbit4_rc4_win_feb24.yar","name":"mal_lockbit4_rc4_win_feb24.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8f6d33d00c8bd6f4af95035c8bb6783be867353d744dbe56e7b80532a528e82b","bytes":1216,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_lockbit_lnx_macos_apr23.yar","name":"mal_lockbit_lnx_macos_apr23.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b7b1f9aca344cd120329762dda90ec7e9dc48cec6f396754b2e3ca25904191c5","bytes":3930,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux","macOS"]},{"path":"rules/nextron/yara/mal_netsha.yar","name":"mal_netsha.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b26a80b478859ef9f22a79550c958154224cb2b11af26a776d3b970496120d83","bytes":1387,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_npm_supply_chain_mar26.yar","name":"mal_npm_supply_chain_mar26.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"20dd1065f99a03bb928cac7b777aa73eed89ec3a0f0125071743ca431bf672d5","bytes":1610,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/mal_npm_supply_chain_nov25.yar","name":"mal_npm_supply_chain_nov25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"aedca10be519f44fa6a5322ba3634a04bdc9898c97b96ba2df5cf928c7193169","bytes":2646,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/mal_npm_supply_chain_sep25.yar","name":"mal_npm_supply_chain_sep25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"af42c615bc4e3daf0e3d6e2627e7d3f3715c6fcdfa721745a15291f512874093","bytes":1661,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/mal_octowave_installer_mar25.yar","name":"mal_octowave_installer_mar25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"662da30366b43101783181e147c1e7d94d22d055db906e603bdbb9ad0fa1acda","bytes":1863,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_octowave_loader_mar25.yar","name":"mal_octowave_loader_mar25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9298b67dd9d0accbf53c04c18871954bced280b04619e667c27dbd923b34f07e","bytes":10448,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_passwordstate_backdoor.yar","name":"mal_passwordstate_backdoor.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"90bdcccf3aa94b870eec4ca269a7ce34a7318a9e6e6b27701acf95f7e7e8dd1c","bytes":1194,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_perfctl_oct24.yar","name":"mal_perfctl_oct24.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6f4f836e16c698fb338a443a73dbaae564908cbf7837a20b4a89f749c342d9ba","bytes":1702,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/mal_phish_feb25.yar","name":"mal_phish_feb25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"baf579f772810dac0bedcca6812c5a6e457b36cbbf2c46ebbfd9d8054b0dff44","bytes":3789,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_qbot_feb23.yar","name":"mal_qbot_feb23.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7f10400c3acfb021c9be390c257dee421e151929743cb6ea3d248d0d722bfb52","bytes":2623,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_qbot_payloads.yar","name":"mal_qbot_payloads.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"79711ad667a5ae35c0cb1a59e302b3ee9e862157aa6e10d26f11da385f6f0948","bytes":2298,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/mal_ralordv1_win_ap25.yar","name":"mal_ralordv1_win_ap25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e5e5e2e958e2726c505329554b8c1161f7d0d653fe4c18118c670c9b831b1ce5","bytes":1518,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_ransom_esxi_attacks_feb23.yar","name":"mal_ransom_esxi_attacks_feb23.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7d2f5fb2d835b51dcfc2048b359559dc91f70220a548ddff153b908a611f11a9","bytes":4911,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/mal_ransom_gentlemen.yar","name":"mal_ransom_gentlemen.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"5313ef87ff3eceb9c4107a89622eeca5d933e2e2336220435ad89da1e94c2601","bytes":1285,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_ransom_lorenz.yar","name":"mal_ransom_lorenz.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9773667881798d80ce2965c1a0c39bffa2ec5306dc366ecad01b422de57440ff","bytes":1249,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_react2shell_campaigns_dec25.yar","name":"mal_react2shell_campaigns_dec25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9c938ef92945923253ccc44098740c2ede8eea38d666ca902f4e37a8935eca84","bytes":2087,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/mal_ru_sparepart_dec22.yar","name":"mal_ru_sparepart_dec22.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ca4d44ce97aa656332f21f22b856e6f36c649aaccc141dbe6746f12bdd524c4b","bytes":1956,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_sophos_pygmy_nov24.yar","name":"mal_sophos_pygmy_nov24.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"72f6f881bdb6cf28b009a65f28b9e1f3127d336b5a483afd70f4d02c6073a121","bytes":3170,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/mal_soupdealer_java_aug25.yar","name":"mal_soupdealer_java_aug25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"22461efda37832b306a328af4e435521a96caebfa723385436058689918a3cb1","bytes":2969,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Android/Java"]},{"path":"rules/nextron/yara/mal_teampcp_mar26.yar","name":"mal_teampcp_mar26.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7cf49978d3fc5164507467876d4b8b8bc08a5e089d714edc7ea4dc340dab7cba","bytes":1259,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_win_akira_apr25.yar","name":"mal_win_akira_apr25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a7d379a99d8c5c4c948edbbd787eb5031811789a1de0c9fe7afd46a53887830a","bytes":1643,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_win_amadey_jun25.yar","name":"mal_win_amadey_jun25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7daa4ef8003f8a65b17f3d2b445920fb702eed224ce704dde475f937fa4f44be","bytes":1294,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_win_go_backorder_loader.yar","name":"mal_win_go_backorder_loader.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"cf80cb1c324ae9567efe1cef757c5513be87d1007b6a6617a9ce87c2f9c0a233","bytes":1207,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_win_megazord_apr25.yar","name":"mal_win_megazord_apr25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fb4f0324d40ef40274ada3984dab6ce248928c12c944799866f3c1350df7d3be","bytes":2107,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/mal_wipers_jun25.yar","name":"mal_wipers_jun25.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"67820d983fc7378c134c0d4e0a8d28183137fd4d882ee2abea4885cf6368ff46","bytes":3115,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]},{"path":"rules/nextron/yara/mal_xlogin_nov24.yar","name":"mal_xlogin_nov24.yar","category":"mal","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9a3bb20198a43bf26c89e91bf1a6a3467af7330f72095cc65cb4d9dbf512d76f","bytes":940,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/mixed_open_source_export.yar","name":"mixed_open_source_export.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"77f30e30b9ab2a99e170c9d600dfac825ee40cc844b4e3c63a600b847bea9f74","bytes":451,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/pua_cryptocoin_miner.yar","name":"pua_cryptocoin_miner.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"0144596e3d328f29fd00419937d3785dd6b92bba50595bf10c79c4fa5e32310f","bytes":2928,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/pua_xmrig_monero_miner.yar","name":"pua_xmrig_monero_miner.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"6c00da6d2f1b2fb21c816e50b4748f9c455cf976d6c3aff51a12ff0cfbf2e851","bytes":3822,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/pup_lightftp.yar","name":"pup_lightftp.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"35329d427fbc0b9bbb9c48db1bbb677d968aeab40f5d4c583c14e20305edfe63","bytes":1483,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/react_pocs_indicators_dec25.yar","name":"react_pocs_indicators_dec25.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"eb0e2f789e7b7b45a4c3a45b62f2b12be10c5c15d9ee077ef32eef02b32f0797","bytes":6046,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/seaspy_backdoor_jan25.yar","name":"seaspy_backdoor_jan25.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2f13ccf37c59076df645598c93eda7d8f034fed68180125d672130df162833ae","bytes":2766,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/spy_equation_fiveeyes.yar","name":"spy_equation_fiveeyes.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a741f05fca88ce6094d63dfcb2bf7f66214f33bfe3246aeaa31fe02e751412a9","bytes":22067,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/spy_querty_fiveeyes.yar","name":"spy_querty_fiveeyes.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f3ab27a8ad92628ed433af5b62ebc17f214f5e470332ca877449a8305b690044","bytes":12051,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/spy_regin_fiveeyes.yar","name":"spy_regin_fiveeyes.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"ba7a8695fff1eddbeda2f6a156685610b00af5c48439fa55cb0a541c5e6ba37a","bytes":13951,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/susp_aur_packages.yar","name":"susp_aur_packages.yar","category":"susp","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"016bf87b9bd248c7f098abeed47e0c4854581d912298d59b9f71268f5244e5a7","bytes":3436,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/susp_bat_obfusc_jul24.yar","name":"susp_bat_obfusc_jul24.yar","category":"susp","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"9bbe05675bc331db8b230ab1632ecaef400764c6bdd750c3f9044a7e732d7dfd","bytes":1757,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/susp_claude_magic_strings.yar","name":"susp_claude_magic_strings.yar","category":"susp","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"06dfc96b06ecbd9c640111f7ccee1114bc9a2adc357acf3b6bc200ea06ad4f40","bytes":2345,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/susp_email_redirection_spoofing.yar","name":"susp_email_redirection_spoofing.yar","category":"susp","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fdbb66aa97cc19423ce183afba89535e6bc3f90f8ba80ef6679283fa94efb6ce","bytes":886,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/susp_generic_rules_may26.yar","name":"susp_generic_rules_may26.yar","category":"susp","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4609ac35e1e244f092129ce79488f076c2f29a46b1e1b9e031c7b5e0a2d617df","bytes":1687,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/susp_office_template_injection.yar","name":"susp_office_template_injection.yar","category":"susp","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2b9e361b0de0e5f8bd2b019afdae91e1e050df259cf1374e7ab24e42a120d532","bytes":934,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/susp_vulndriver_hp_hardware_diagnostics_etdsupp_may23.yar","name":"susp_vulndriver_hp_hardware_diagnostics_etdsupp_may23.yar","category":"susp","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b9ed1341bef9e183a95c4497389bc7b7129a87ef815481578552487cd4af9484","bytes":1118,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/thor-hacktools.yar","name":"thor-hacktools.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4e51a8d2ce8ad2742c10ee1ebd0c06cd9199966a9edeab46ab86aa345ab00d0a","bytes":185104,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","Android/Java"]},{"path":"rules/nextron/yara/thor-webshells.yar","name":"thor-webshells.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"a297a3cda25740f700ce5ac71b3924660c306d54138a277d0e6e87832961b192","bytes":393194,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux","Android/Java"]},{"path":"rules/nextron/yara/thor_inverse_matches.yar","name":"thor_inverse_matches.yar","category":"thor","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"aef98eb7b21a4ec2f0ce6c5d06a6907f8548dcf7470045b474683fc86a8ee877","bytes":21544,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/threat_compromised_daemon_tools_lite_may26.yar","name":"threat_compromised_daemon_tools_lite_may26.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e93b43f3fcfa144e9a327d33aefd405d80c93c378e5440fd42c813a9a58f683a","bytes":4453,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/threat_lenovo_superfish.yar","name":"threat_lenovo_superfish.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"033816552f69226f9fa62cf3bbbd0b5e4013c9a9e1ae14b7071f0dd9de923f00","bytes":957,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/vul_backdoor_antitheftweb.yar","name":"vul_backdoor_antitheftweb.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"17f8e066a4b44e6a33ba4cee7262adb70ed4d398095b6753b8b64bc7071f3421","bytes":1168,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vul_confluence_questions_plugin_cve_2022_26138.yar","name":"vul_confluence_questions_plugin_cve_2022_26138.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"acb5deb548fac70be49042535b5e394932af6bfd12e3afcb00ae6f7044ba5ebd","bytes":1165,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vul_cve_2020_0688.yar","name":"vul_cve_2020_0688.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"58fff070b2fb6a163ac201878fb6bd72156a015310a0eb54e131127e004278eb","bytes":629,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vul_cve_2020_1938.yar","name":"vul_cve_2020_1938.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"4e96c277b5145701ff8fac97f4e8d8b6d35b30004a90d56182171fdd58afe077","bytes":894,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vul_cve_2021_3438_printdriver.yar","name":"vul_cve_2021_3438_printdriver.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"dba98802e5ae2ecc7c1ac2635b4ad1f939a36daf7da5a584f2511bd0d1661163","bytes":841,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/vul_cve_2021_386471_omi.yar","name":"vul_cve_2021_386471_omi.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"61a9c9c80b92a2da99504e65e2d217710c48cb54619d8171aaaed7196662f7fa","bytes":1349,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/vul_dell_bios_upd_driver.yar","name":"vul_dell_bios_upd_driver.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e080783be311b24b7e099e071504e35cc93508368608f448dcb6ca44f5e73c7b","bytes":963,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/vul_drivecrypt.yar","name":"vul_drivecrypt.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"719da7a6a77f2886b4a79afee9edbe11fe4ed55929a360c662a5919c395ae156","bytes":1399,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/vul_jquery_fileupload_cve_2018_9206.yar","name":"vul_jquery_fileupload_cve_2018_9206.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"70e9d58f05d067a22f7a39d705ceaea45d8294e0d3912db77e4033742821e3bd","bytes":848,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vul_php_zlib_backdoor.yar","name":"vul_php_zlib_backdoor.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"b3da6044dddb604c6eb1b6d516ed7c292606039f8c88f3e456aa23fa777cfe8c","bytes":561,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vuln_erlang_otp_ssh_cve_2025_32433.yar","name":"vuln_erlang_otp_ssh_cve_2025_32433.yar","category":"vuln","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f697a9447e21a1d26a6c18715e9e949f2c49507887ac4611db1cccff42ad2816","bytes":730,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vuln_gigabyte_driver.yar","name":"vuln_gigabyte_driver.yar","category":"vuln","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"619bed15b514e82ecf260f50680d532358b8b1fa1e2c8204649ec5ba30a479b8","bytes":1715,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vuln_keepass_brute_forcible.yar","name":"vuln_keepass_brute_forcible.yar","category":"vuln","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"82e92fc436681389e7d5029d4e1161717780a2bc8cc6cd0ba08b89bfa061fb29","bytes":974,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/vuln_moveit_0day_jun23.yar","name":"vuln_moveit_0day_jun23.yar","category":"vuln","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"fe6df466074bd5762fe0a3a14f10a1b3c2ac171b4f5146ca4b1a40ffc1b32e1f","bytes":3800,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows"]},{"path":"rules/nextron/yara/vuln_paloalto_cve_2024_3400_apr24.yar","name":"vuln_paloalto_cve_2024_3400_apr24.yar","category":"vuln","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"e90feade2ee477d3538ec4f5a2d2816b988347a9187f4fab43bf79c30ef9e245","bytes":3649,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Linux"]},{"path":"rules/nextron/yara/vuln_proxynotshell_cve_2022_41040.yar","name":"vuln_proxynotshell_cve_2022_41040.yar","category":"vuln","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"8260f897439415a34b05927ae3584d92cadc2f6ae903b8049f8a4986bc3ecf7d","bytes":731,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/webshell_regeorg.yar","name":"webshell_regeorg.yar","category":"webshell","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"c138b217948712c379dd0bd7e8fb7c781daaecea0edad5f6f005d39ab7ea2241","bytes":677,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/webshell_xsl_transform.yar","name":"webshell_xsl_transform.yar","category":"webshell","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"2443298ee304f2433ae0a7a30a7237f0bd3987489a6087adce027d9f2f65c31c","bytes":704,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/yara-rules_mal_drivers.yar","name":"yara-rules_mal_drivers.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"f4756267ff66a08452eb10861dea3131495f5734f3ec53b6cb2038b5054e0561","bytes":51883,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["unspecified"]},{"path":"rules/nextron/yara/yara_mixed_ext_vars.yar","name":"yara_mixed_ext_vars.yar","category":"yara","source":"nextron","repository":"Neo23x0/signature-base","commit":"3ce6640c26046da8e6d8094af3eaaee3ee84e648","sha256":"7e08fc6a57e775b78253a658c34049311c4fd65e8852474ebbe4706b927e1fdb","bytes":22619,"validation":"compiled","first_release":"rules-20261018-39103534527","changed_in":"rules-20261018-39103534527","platforms":["Windows","Linux"]}]}