YARA rules for Solarmarker
9 rules from 4 sources detect Solarmarker. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware, Suspicious / hunting.
Family grouping is heuristic: check each rule's description.
Scan files with all Solarmarker rulesSearch rules
Finds SolarMarker DLL based on characteristic strings
MalwareSEKOIA.IO Community· Sekoia.io· 2022-12-09Finds SolarMarker PowerShell script based on characteristic strings
MalwareSEKOIA.IO Community· Sekoia.io· 2022-12-09Detects bytecodes present in solarmarker Packer
Suspicious / huntingEmbee Research· Matthew @ Embee_Research· 2023-09-10Patterns observed in Solarmarker stage2 dll
MalwareEmbee Research· Matthew @ Embee_Research· 2023-12-28Detects SolarMarker
MalwareditekSHen detection· ditekSHen· 2020-11-06- RUSSIANPANDA_Solarmarker_Loader_PS2EXEMetadata only
Detects SolarMarker loader using PS2EXE
MalwareRussianPanda· RussianPanda· 2024-01-04 - RUSSIANPANDA_SolardropperMetadata only
SolarMarker first stage detection
MalwareRussianPanda· RussianPanda· 2023-06-22 - RUSSIANPANDA_Solarmarker_LoaderMetadata only
Detects SolarMarker loader 1-4-2024
MalwareRussianPanda· RussianPanda· 2024-01-04 - RUSSIANPANDA_Solarmarker_First_Stage_PayloadMetadata only
Detects SolarMarker First Stage payload
MalwareRussianPanda· RussianPanda· 2024-01-30