YARA rules for Iconic Stealer
4 rules from 4 sources detect Iconic Stealer. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware, APT / threat actor.
Family grouping is heuristic: check each rule's description.
Scan files with all Iconic Stealer rulesSearch rules
Detects ICONIC stealer payload used in the 3CX incident
APT / threat actorSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2023-03-31Rich Headers-based rule covering the IconicLoader and IconicStealer from the 3CX supply chain incident, and also payloads from the cryptocurrency campaigns from 2022-12
MalwareESET malware-ioc· ESET Research· 2023-03-31Detect the ICONICSTEALER malware family.
APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2023-03-30autogenerated rule brought to you by yara-signator
MalwareMalpedia signator rules· Felix Bilstein - yara-signator at cocacoding dot com· 2026-05-04