Skip to content
yararules.org
Menu

YARA · Arkbird SOLG (DailyIOC)

ARKBIRD_SOLG_MAL_Milum_Jul_2021_1

Detect Milum malware

MalwareMilumArkbird SOLG (DailyIOC)No licence (all rights reserved)Compiles with YARA-X
Author
Arkbird_SOLG
Date
2021-07-08
Score / Quality
75 / 75

What this rule detects

Detect Milum malware

Associated malware family: Milum.

Targets: Windows PE.

It defines 8 patterns (1 text, 7 hex, 0 regex).

Summary generated from the rule's metadata and condition.

Rule source

Rule text not reproduced

This rule comes from Arkbird SOLG (DailyIOC), which does not grant a licence to redistribute its rules (No licence (all rights reserved)). We show its metadata only. Read the original rule upstream:

View the rule on GitHubOpen the repository

References

Sample hashes

Hashes of samples the author lists in the rule's meta (look them up in your threat-intelligence platform).

  • 7eafb957c2e715e06489a979a185f75d7a9d502223c8aba36e7b6b8ead7d03b2
  • 86456ebf6b807e8253faf1262e7a2b673131c80174f6133b253b2e5f0da442a9
  • 5e0226f37b861876ec38e4a1564a26e4af3022d869375bc0f09b8feea4cd9e1b

Licence & attribution

Author: Arkbird_SOLG

Source repository: Arkbird SOLG (DailyIOC) @ a873ff1298

Licence: No licence (all rights reserved) (repository licence)

Original rule

Mirrored via YARA Forge 20260927, which prefixes rule names with the source and adds normalised meta fields.

Rule id: ba1cc56e-f6da-57db-a773-4823ae343e31

Metadata

tlpWhite
adversaryWildPressure

Tags:FILE

Related rules

More Milum rules