YARA · delivr.to detections
DELIVRTO_SUSP_HTML_WASM_Smuggling
Presence of Base64 JavaScript blob loading WASM
- Author
- delivr.to
- Date
- 2024-02-28
- Modified
- 2024-05-24
- Score / Quality
- 70 / 80
What this rule detects
Presence of Base64 JavaScript blob loading WASM
It defines 3 patterns (3 text, 0 hex, 0 regex).
Summary generated from the rule's metadata and condition.
Rule source
Rule text not reproduced
This rule comes from delivr.to detections, which does not grant a licence to redistribute its rules (No licence (all rights reserved)). We show its metadata only. Read the original rule upstream:
References
Licence & attribution
Author: delivr.to
Source repository: delivr.to detections @ f85e1d0c47
Licence: No licence (all rights reserved) (repository licence)
Mirrored via YARA Forge 20260927, which prefixes rule names with the source and adds normalised meta fields.
Rule id: fc83bb4f-ba8a-52d2-b9ce-632da5341f77
Related rules
- DELIVRTO_SUSP_PDF_MHT_Activemime_Sept23Metadata onlySuspicious / huntingdelivr.to detections· delivr.to· 2023-09-04