YARA · SecuInfra Falcon Team
SECUINFRA_DROPPER_Njrat_VBS
No description has been set in the source file - SecuInfra
- Author
- SECUINFRA Falcon Team
- Date
- 2022-02-27
- Score / Quality
- 75 / 70
What this rule detects
No description has been set in the source file - SecuInfra
Associated malware family: Njrat.
It defines 7 patterns (7 text, 0 hex, 0 regex).
Summary generated from the rule's metadata and condition.
Rule source
Rule text not reproduced
This rule comes from SecuInfra Falcon Team, which does not grant a licence to redistribute its rules (No licence (all rights reserved)). We show its metadata only. Read the original rule upstream:
Licence & attribution
Author: SECUINFRA Falcon Team
Source repository: SecuInfra Falcon Team @ 2d7c66d7d1
Licence: No licence (all rights reserved) (repository licence)
Mirrored via YARA Forge 20260927, which prefixes rule names with the source and adds normalised meta fields.
Rule id: 5296667a-2932-597e-8f49-b7fa755cb387
Related rules
- SECUINFRA_MAL_NjratMetadata onlyMalwareSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-02-27
- MalwareSEKOIA.IO Community· Sekoia.io· 2022-08-22
- MalwareEmbee Research· Matthew @ Embee_Research· 2023-10-03
- MalwareEmbee Research· Matthew @ Embee_Research· 2023-10-03
- MalwareEmbee Research· Matthew @ Embee_Research· 2023-10-03
- MalwareditekSHen detection· ditekSHen· 2020-11-06
- Hack toolSignature Base (Florian Roth / Nextron)· Arnim Rupp· 2021-01-22
- Hack toolSignature Base (Florian Roth / Nextron)· Arnim Rupp (https://github.com/ruppde)· 2020-12-30