YARA rules for Vbsdownloader
4 rules from 2 sources detect Vbsdownloader. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware, APT / threat actor.
Family grouping is heuristic: check each rule's description.
Scan files with all Vbsdownloader rulesSearch rules
Detects the core of the VBS Gamaredon's Telegram Downloader
APT / threat actorSEKOIA.IO Community· Sekoia.io· 2023-01-25Detects an sLoad downloader based on strings
MalwareSEKOIA.IO Community· Sekoia.io· 2022-08-02Detects malicious VBScript executed by LNK/mshta
APT / threat actorSEKOIA.IO Community· Sekoia.io· 2023-01-24Detects second stage VBS downloader of third stage VBS
MalwareditekSHen detection· ditekShen· 2020-11-06