YARA rules for Metastealer
5 rules from 3 sources detect Metastealer. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware, Suspicious / hunting.
Family grouping is heuristic: check each rule's description.
Scan files with all Metastealer rulesSearch rules
autogenerated rule brought to you by yara-signator
MalwareMalpedia signator rules· Felix Bilstein - yara-signator at cocacoding dot com· 2026-05-04Detects MetaStealer infostealer
MalwareditekSHen detection· ditekSHen· 2020-11-06- RUSSIANPANDA_MetastealerMetadata only
Detects the old version of MetaStealer 11-2023
MalwareRussianPanda· RussianPanda· 2023-11-16 - RUSSIANPANDA_Metastealer_Core_PayloadMetadata only
Detects MetaStealer Core Payload
MalwareRussianPanda· RussianPanda· 2023-12-29 - RUSSIANPANDA_Metastealer_NET_Reactor_PackerMetadata only
Detects NET_Reactor_packer 12-2023 used in MetaStealer
Suspicious / huntingRussianPanda· RussianPanda· 2023-12-29