Skip to content
yararules.org
Menu

YARA rules for Nefilim

4 rules from 2 sources detect Nefilim. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware.

Family grouping is heuristic: check each rule's description.

Scan files with all Nefilim rulesSearch rules

  • MALPEDIA_Win_Nefilim_Auto

    autogenerated rule brought to you by yara-signator

    MalwareMalpedia signator rules· Felix Bilstein - yara-signator at cocacoding dot com· 2026-05-04
  • TRELLIX_ARC_Nefilim_Ransomware

    Rule to detect Nefilim ransomware

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-03-17
  • TRELLIX_ARC_RANSOM_Nefilim_Go

    Rule to detect the new Nefilim written in GO

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-07-13
  • TRELLIX_ARC_Nefilim_Signed

    Rule to detect Nefilim samples digitally signed

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-04-02