YARA-Regeln mit dem Tag INKYPINE

5 Regeln tragen den Tag „INKYPINE“.

VOLEXITY_Apt_Malware_Py_Bluelight_Ldr
Python Loader used to execute the BLUELIGHT malware family.
APT / AkteurVolexity threat-intel· threatintel@volexity.com· 2021-06-22
VOLEXITY_Apt_Malware_Rb_Rokrat_Loader
Ruby loader seen loading the ROKRAT malware family.
APT / AkteurVolexity threat-intel· threatintel@volexity.com· 2021-06-22
VOLEXITY_Apt_Malware_Win_Bluelight
The BLUELIGHT malware family. Leverages Microsoft OneDrive for network communications.
APT / AkteurVolexity threat-intel· threatintel@volexity.com· 2021-04-23
VOLEXITY_Apt_Malware_Win_Decrok
The DECROK malware family, which uses the victim's hostname to decrypt and execute an embedded payload.
APT / AkteurVolexity threat-intel· threatintel@volexity.com· 2021-06-23
VOLEXITY_Apt_Malware_Win_Rokload
A shellcode loader used to decrypt and run an embedded executable.
APT / AkteurVolexity threat-intel· threatintel@volexity.com· 2021-06-23