YARA rules for Hyperbro
5 rules from 3 sources detect Hyperbro. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware, APT / threat actor.
Family grouping is heuristic: check each rule's description.
Scan files with all Hyperbro rulesSearch rules
Yara rule to detect first Hyperbro Loader Stage, often called vftrace.dll. Detects decoding function.
APT / threat actorSignature Base (Florian Roth / Nextron)· Bundesamt fuer Verfassungsschutz (modified by Florian Roth)· 2022-01-14HyperBro Stage 2 and compressed Stage 3 detection
MalwareSignature Base (Florian Roth / Nextron)· Moritz Oettle· 2022-02-07HyperBro Stage 3 registry keys for persistence
MalwareSignature Base (Florian Roth / Nextron)· Marko Dorfhuber· 2022-02-07autogenerated rule brought to you by yara-signator
MalwareMalpedia signator rules· Felix Bilstein - yara-signator at cocacoding dot com· 2026-05-04Detects HyperBro (class names) payload
MalwareditekSHen detection· ditekSHen· 2020-11-06