Check Point (via Open-Source-YARA-rules)
- Repository
- https://github.com/mikesxrs/Open-Source-YARA-rules
- Commit
- ec0056f767db98bf6d5fd63877ad51fb54d350e9
- Retrieved
- 2026-09-27
- Licence
- No licence (all rights reserved)
- Published
- Metadata
- Why
- Unlicensed mirror repository and no licence in the rules: metadata and upstream link only.
Rules from Check Point (via Open-Source-YARA-rules)
- CHECK_POINT_Injector_ZZ_Dotrunpex_OldnewMetadata only
Detects new and old version of dotRunpeX - configurable .NET injector
MalwareCheck Point (via Open-Source-YARA-rules)· Jiri Vinopal (jiriv)· 2022-10-30 - CHECK_POINT_Malware_Bumblebee_PackedMetadata only
Detects the packer used by bumblebee, the rule is based on the code responsible for allocating memory for a critical structure in its logic.
MalwareCheck Point (via Open-Source-YARA-rules)· Marc Salinas @ CheckPoint Research· 2022-07-13 - CHECK_POINT_Injector_ZZ_DotrunpexMetadata only
Detects new version of dotRunpeX - configurable .NET injector
MalwareCheck Point (via Open-Source-YARA-rules)· Jiri Vinopal (jiriv)· 2022-10-30 - CHECK_POINT_Apt_Nazar_Component_GuidsMetadata only
Detect Nazar Components by COM Objects' GUID
APT / threat actorCheck Point (via Open-Source-YARA-rules)· Itay Cohen· 2020-04-27