YARA rules for Vidar
5 rules from 4 sources detect Vidar. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware.
Family grouping is heuristic: check each rule's description.
Scan files with all Vidar rulesSearch rules
Finds Vidar samples based on the specific strings
MalwareSEKOIA.IO Community· Sekoia.io· 2023-11-10Detect the Vidar infostealer based on specific strings
MalwareSEKOIA.IO Community· Sekoia.io· 2022-07-26Detects Vidar / ArkeiStealer
MalwareditekSHen detection· ditekSHen· 2020-11-06- RUSSIANPANDA_Vidar_DLL_EmbeddedMetadata only
Vidar Stealer with embedded DLL dependencies
MalwareRussianPanda· RussianPanda· 2023-05-02 - ARTIFACTDROP_Go_Reflectiveloader_Decryption_LoopMetadata only
Detects the specific Odd/Even decryption loop in a Go-based loader for Vidar
Malwareartifact-drop· Matthieu Gras· 2025-12-17