Skip to content
yararules.org
Menu

YARA rules for Konni

8 rules from 2 sources detect Konni. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware, APT / threat actor.

Family grouping is heuristic: check each rule's description.

Scan files with all Konni rulesSearch rules

  • SEKOIA_Apt_Konni_Check_Bat

    Script used to performs check before executing Konni

    APT / threat actorSEKOIA.IO Community· Sekoia.io· 2023-11-27
  • SEKOIA_Apt_Konni_Dropper

    Detects Konni dropper used when distributed via malicious document

    APT / threat actorSEKOIA.IO Community· Sekoia.io· 2023-11-27
  • SEKOIA_Dropper_Win_Konni_Cab

    Detect the CAB files used to drop the KONNI malware

    MalwareSEKOIA.IO Community· Sekoia.io· 2023-09-26
  • SEKOIA_Loader_Win_Konni_Bat

    Detect the BAT files (named trap.bat or yup.bat) used by KONNI

    MalwareSEKOIA.IO Community· Sekoia.io· 2023-09-26
  • SEKOIA_Rat_Win_Konni_Rat

    Detect the KONNI RAT DLL files (x32 and x64)

    MalwareSEKOIA.IO Community· Sekoia.io· 2023-09-26
  • SEKOIA_Apt_Konni

    Rule based on structure offsets and file extension

    APT / threat actorSEKOIA.IO Community· Sekoia.io· 2022-09-12
  • SEKOIA_Kimsuky_Konni_Dll

    Rule based on structure offset and file extension

    MalwareSEKOIA.IO Community· Sekoia.io· 2022-09-12
  • DITEKSHEN_MALWARE_Win_Konni

    Konni payload

    MalwareditekSHen detection· ditekSHen· 2020-11-06