BlackBerry Research & Intelligence (via Open-Source-YARA-rules)

Repository

https://github.com/mikesxrs/Open-Source-YARA-rules

Commit

ec0056f767db98bf6d5fd63877ad51fb54d350e9

Retrieved

2026-09-27

Licence

No licence (all rights reserved)

Published

Mixed (20/21)

Why

Unlicensed mirror repository, but each rule states it is provided under the Apache License 2.0 with originator credit to the BlackBerry Research & Intelligence Team: republished under Apache 2.0 per rule, with that credit.

Download pack (.yar, 20 rules)

Rules from BlackBerry Research & Intelligence (via Open-Source-YARA-rules)

• BLACKBERRY_Headertip

  Detects HeaderTip

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-04-06
• BLACKBERRY_Windealer_Executable

  Detects WinDealer Executable

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-06-14
• BLACKBERRY_Windealer_Library

  Detects WinDealer Loaded DLL

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-06-14
• BLACKBERRY_Boratrat

  Detects BoratRAT.exe

  GenericBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-04-13
• BLACKBERRY_Eternityclipper

  Detects Eternity Clipper

  GenericBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-05-22
• BLACKBERRY_Eternityransom

  Detects Eternity Ransomware

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-05-22
• BLACKBERRY_Eternitystealer

  Detects Eternity Stealer

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-05-22
• BLACKBERRY_Eternityworm

  Detects Eternity Worm

  GenericBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-05-22
• BLACKBERRY_Mal_Win32_Chaos_Builder_Ransomware_2022

  Detects Chaos Ransomware Builder

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research· 2022-05-10
• BLACKBERRY_Mal_Win32_Onyx_Strain_Chaos_Ransomware_2022

  Detects Onyx Ransomware build off of Chaos Builder v4

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research· 2022-05-10
• BLACKBERRY_Snake

  Detects Snake

  GenericBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-06-03
• BLACKBERRY_Mal_Infostealer_MSI_Jupyter_Embedded_Powershell

  Detects Jupter by a specific PowerShell command present in the MSI Installer

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2021-10-14
• BLACKBERRY_Mal_Infostealer_Win32_Jupyter_Download_And_Execute_Module

  Detects Jupter download and execute module. Research has shown it downloading SolarDelphi / JupyterStealer.

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2021-11-09
• BLACKBERRY_Mal_Infostealer_MSI_EXE_Jupyter_Certificate

  Detects Jupter by certificate

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2021-11-04
• BLACKBERRY_Mal_Infostealer_Win32_Jupyter_Main_Module

  Detects Jupter main module

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2021-11-23
• BLACKBERRY_Boratratinformation

  Detects BoratRAT Information Module

  GenericBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-04-13
• BLACKBERRY_Boratratkeylogger

  Detects BoratRAT Keylogger

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research Team· 2022-04-13
• BLACKBERRY_Mal_Infostealer_Win32_Blackguard

  Detects W32 BlackGuard Infostealer

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research team· 2022-04-14
• BLACKBERRY_Mal_Infostealer_EXE_Jupyter_Cert_36Ff

  Detects Jupter executables by certificate OOO Sistema (36ff)

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Research & Intelligence Team· 2021-10-14
• BLACKBERRY_Mal_Win32_Chaosransomware_2022

  Detects Ransomware Built by Chaos Ransomware Builder

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research· 2022-05-10
• BLACKBERRY_Mal_Backdoor_Chachi_RATMetadata only

  ChaChi RAT used in PYSA Ransomware Campaigns

  MalwareBlackBerry Research & Intelligence (via Open-Source-YARA-rules)· BlackBerry Threat Research & Intelligence· 2022-07-07