Skip to content
yararules.org
Menu

YARA rules for Bluelight

5 rules from 3 sources detect Bluelight. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: APT / threat actor, Malware.

Family grouping is heuristic: check each rule's description.

Scan files with all Bluelight rulesSearch rules

  • SIGNATURE_BASE_APT_MAL_Win_Bluelight

    The BLUELIGHT malware family. Leverages Microsoft OneDrive for network communications.

    APT / threat actorSignature Base (Florian Roth / Nextron)· threatintel@volexity.com· 2021-04-23
  • SIGNATURE_BASE_APT_PY_Bluelight_Loader

    Python Loader used to execute the BLUELIGHT malware family.

    APT / threat actorSignature Base (Florian Roth / Nextron)· threatintel@volexity.com· 2021-06-22
  • MALPEDIA_Win_Bluelight_Auto

    autogenerated rule brought to you by yara-signator

    MalwareMalpedia signator rules· Felix Bilstein - yara-signator at cocacoding dot com· 2026-05-04
  • VOLEXITY_Apt_Malware_Py_Bluelight_Ldr

    Python Loader used to execute the BLUELIGHT malware family.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2021-06-22
  • VOLEXITY_Apt_Malware_Win_Bluelight

    The BLUELIGHT malware family. Leverages Microsoft OneDrive for network communications.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2021-04-23