Skip to content
yararules.org
Menu

YARA rules for BumbleBee

7 rules from 4 sources detect BumbleBee. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware.

Family grouping is heuristic: check each rule's description.

Scan files with all BumbleBee rulesSearch rules

  • SEKOIA_Bumblebee_Loader

    Detect the BUMBLEBEE loader

    MalwareSEKOIA.IO Community· Sekoia.io· 2022-05-23
  • SEKOIA_Loader_Win_Bumblebee

    Detect BUMBLEBEE based on specific strings

    MalwareSEKOIA.IO Community· Sekoia.io· 2022-04-08
  • MALPEDIA_Win_Bumblebee_Auto

    autogenerated rule brought to you by yara-signator

    MalwareMalpedia signator rules· Felix Bilstein - yara-signator at cocacoding dot com· 2026-05-04
  • CAPE_Bumblebee

    BumbleBee Payload

    MalwareCAPE Sandbox (CAPEv2)· enzo & kevoreilly· 2022-04-21
  • CAPE_Bumblebee2024

    BumbleBee 2024

    MalwareCAPE Sandbox (CAPEv2)· enzok· 2022-04-21
  • CAPE_Bumblebeeshellcode_1

    BumbleBee Loader 2023

    MalwareCAPE Sandbox (CAPEv2)· kevoreilly· 2022-04-21
  • CHECK_POINT_Malware_Bumblebee_PackedMetadata only

    Detects the packer used by bumblebee, the rule is based on the code responsible for allocating memory for a critical structure in its logic.

    MalwareCheck Point (via Open-Source-YARA-rules)· Marc Salinas @ CheckPoint Research· 2022-07-13