RussianPanda

Repository

https://github.com/RussianPanda95/Yara-Rules

Commit

acb504b67b1f4a456f365ee9333a4c87fc76f23d

Retrieved

2026-09-27

Licence

No licence (all rights reserved)

Published

Metadata

Why

No LICENSE file in the repository and no licence statement in its README (checked 2026-09-29). Without a grant, the rules are all rights reserved: metadata and an upstream link only.

Rules from RussianPanda

• RUSSIANPANDA_SupperbackdoorMetadata only

  Detects Supper backdoor

  MalwareRussianPanda· RussianPanda· 2026-04-14
• RUSSIANPANDA_GetshellpluginMetadata only

  Detects GetShell Plugin (client)

  MalwareRussianPanda· RussianPanda· 2025-12-31
• RUSSIANPANDA_Win_Mal_AstarionratMetadata only

  Detects AstarionRAT

  MalwareRussianPanda· RussianPanda· 2025-02-14
• RUSSIANPANDA_Win_Mal_Stealc_V2Metadata only

  Detects StealC v2

  MalwareRussianPanda· RussianPanda· 2025-04-10
• RUSSIANPANDA_Win_Ransom_Lockbit5Metadata only

  Detects LockBit 5.0

  MalwareRussianPanda· RussianPanda· 2025-09-15
• RUSSIANPANDA_DarkvncMetadata only

  Detects DarkVNC

  MalwareRussianPanda· RussianPanda· 2024-01-15
• RUSSIANPANDA_Pikabot_1Metadata only

  Detects PikaBot

  MalwareRussianPanda· RussianPanda· 2024-01-02
• RUSSIANPANDA_RaccoonstealerMetadata only

  Detects Raccoon Stealer v2.3.1.1

  MalwareRussianPanda· RussianPanda· 2024-01-08
• RUSSIANPANDA_Solarmarker_Loader_PS2EXEMetadata only

  Detects SolarMarker loader using PS2EXE

  MalwareRussianPanda· RussianPanda· 2024-01-04
• RUSSIANPANDA_Win_Mal_Koi_LoaderMetadata only

  Detects Koi Loader

  MalwareRussianPanda· RussianPanda· 2024-04-04
• RUSSIANPANDA_Win_Mal_Koi_Loader_DecryptedMetadata only

  Detects decrypted Koi Loader

  MalwareRussianPanda· RussianPanda· 2024-04-04
• RUSSIANPANDA_Ducktail_MainbotMetadata only

  Detects Ducktail mainbot

  MalwareRussianPanda· RussianPanda· 2023-12-24
• RUSSIANPANDA_Ducktail_Myrdpservice_BotMetadata only

  Detects Ducktail myRdpService bot

  MalwareRussianPanda· RussianPanda· 2023-12-24
• RUSSIANPANDA_SolardropperMetadata only

  SolarMarker first stage detection

  MalwareRussianPanda· RussianPanda· 2023-06-22
• RUSSIANPANDA_Vidar_DLL_EmbeddedMetadata only

  Vidar Stealer with embedded DLL dependencies

  MalwareRussianPanda· RussianPanda· 2023-05-02
• RUSSIANPANDA_BeigeburrowMetadata only

  Detects BeigeBurrow Reverse Tunnel Agent

  GenericRussianPanda· RussianPanda· 2026-04-17
• RUSSIANPANDA_GatekeeperpayloadMetadata only

  Detects GateKeeper payload used by KongTuke

  GenericRussianPanda· RussianPanda· 2026-01-16
• RUSSIANPANDA_ModeloratMetadata only

  Detects ModeloRAT Python RAT used by KongTuke

  MalwareRussianPanda· RussianPanda· 2026-01-16
• RUSSIANPANDA_PotemkinloaderMetadata only

  Detects Potemkin Loader

  MalwareRussianPanda· RussianPanda· 2026-06-04
• RUSSIANPANDA_RMMCRATMetadata only

  Detects RMMCRAT

  GenericRussianPanda· PandaRE· 2026-09-22
• RUSSIANPANDA_RmmprojectMetadata only

  Detects RMMProject RAT

  MalwareRussianPanda· RussianPanda· 2026-06-04
• RUSSIANPANDA_Shadowhvnc_LoaderMetadata only

  Detects Shadow HVNC Loader

  MalwareRussianPanda· PandaRE· 2026-08-17
• RUSSIANPANDA_Shadowhvnc_StealerMetadata only

  Detects Shadow HVNC Stealer

  MalwareRussianPanda· PandaRE· 2026-08-17
• RUSSIANPANDA_AMOS_StealerMetadata only

  Detects AMOS Stealer

  MalwareRussianPanda· RussianPanda· 2025-03-31
• RUSSIANPANDA_AMOS_Stealer_1Metadata only

  Detects AMOS Stealer

  MalwareRussianPanda· RussianPanda· 2025-04-11
• RUSSIANPANDA_CowtunnelMetadata only

  Detects CowTunnel

  GenericRussianPanda· RussianPanda· 2025-12-08
• RUSSIANPANDA_Kaiji_AresMetadata only

  Detects a Variant of Kaiji (Ares) observed during React2Shell exploitation

  ExploitRussianPanda· RussianPanda· 2025-12-08
• RUSSIANPANDA_MAESTROMetadata only

  Detects MAESTRO payload

  GenericRussianPanda· RussianPanda· 2025-12-31
• RUSSIANPANDA_MydriversysMetadata only

  Detects the malicious driver - MyDriver.sys

  GenericRussianPanda· RussianPanda· 2025-12-31
• RUSSIANPANDA_TextshellMetadata only

  Detects TextShell Obfsucator

  GenericRussianPanda· RussianPanda· 2025-10-31
• RUSSIANPANDA_VsockpuppetMetadata only

  Detects VSOCKpuppet payload

  GenericRussianPanda· RussianPanda· 2025-12-31
• RUSSIANPANDA_Weyhroc2Metadata only

  Detects Weyhro C2

  GenericRussianPanda· RussianPanda· 2025-12-04
• RUSSIANPANDA_Win_Mal_Chromium_App_Bound_Encryption_DecrypterMetadata only

  Detects Potential Chromium app_bound_encryption key Decrypter

  MalwareRussianPanda· RussianPanda· 2025-02-13
• RUSSIANPANDA_Win_Mal_FatmallocMetadata only

  Detects FatMalloc Crypter

  MalwareRussianPanda· RussianPanda· 2025-03-16
• RUSSIANPANDA_Win_Mal_FormgrabberMetadata only

  Detects Formgrabber Plugin

  MalwareRussianPanda· RussianPanda· 2025-02-13
• RUSSIANPANDA_Win_Mal_GhostweaverMetadata only

  Detects GhostWeaver backdoor

  MalwareRussianPanda· RussianPanda· 2025-02-15
• RUSSIANPANDA_Win_Mal_HwaudkillerMetadata only

  Detects HwAudKiller BYOVD AV/EDR killer

  MalwareRussianPanda· RussianPanda· 2025-03-16
• RUSSIANPANDA_Win_Mal_JuniperstealerMetadata only

  Detects Juniper Stealer

  MalwareRussianPanda· RussianPanda· 2025-02-13
• RUSSIANPANDA_Win_Mal_MmgrabberMetadata only

  Detects mmgrabber Plugin

  MalwareRussianPanda· RussianPanda· 2025-02-13
• RUSSIANPANDA_ZinfoqMetadata only

  Detects ZinFoq implant

  MalwareRussianPanda· RussianPanda· 2025-12-08
• RUSSIANPANDA_EasycrypterMetadata only

  Detects EasyCrypter

  GenericRussianPanda· RussianPanda· 2024-01-05
• RUSSIANPANDA_Gh0StratMetadata only

  Detects Gh0stRAT

  GenericRussianPanda· RussianPanda· 2024-07-09
• RUSSIANPANDA_GhostgambitMetadata only

  Detects GhostGambit dropper

  GenericRussianPanda· RussianPanda· 2024-07-09
• RUSSIANPANDA_JohnwalkertexasloaderMetadata only

  Detects JohnWalkerTexasLoader (JWTL)

  GenericRussianPanda· RussianPanda· 2024-10-10
• RUSSIANPANDA_LegionloaderMetadata only

  Detects LegionLoader core payload

  GenericRussianPanda· RussianPanda· 2024-10-05
• RUSSIANPANDA_Legionloader_DropperMetadata only

  Detects malicious LegionLoader DLL dropper

  MalwareRussianPanda· RussianPanda· 2024-09-23
• RUSSIANPANDA_Lummac2Metadata only

  Detects LummaC2 Stealer

  MalwareRussianPanda· RussianPanda· 2024-09-12
• RUSSIANPANDA_Mal_Asuka_StealerMetadata only

  Detects AsukaStealer

  MalwareRussianPanda· RussianPanda· 2024-02-02
• RUSSIANPANDA_Mal_Botnetfenix_PayloadMetadata only

  Detects BotnetFenix payload

  MalwareRussianPanda· RussianPanda· 2024-02-02
• RUSSIANPANDA_Mal_Fenixbotnet_JseMetadata only

  Detects Fenix Botnet JSE downloader

  MalwareRussianPanda· RussianPanda· 2024-01-18
• RUSSIANPANDA_Mal_Msedge_Dll_VirusloaderMetadata only

  Detects malicious msedge.dll file

  MalwareRussianPanda· RussianPanda· 2024-01-19
• RUSSIANPANDA_Purelogs_Stealer_Initial_DropperMetadata only

  Detects PureLogs Stealer Initial Payload

  MalwareRussianPanda· RussianPanda· 2024-01-10
• RUSSIANPANDA_Sentinel_StealerMetadata only

  Detects Sentinel Stealer

  MalwareRussianPanda· RussianPanda· 2024-01-19
• RUSSIANPANDA_Smartapesg_JS_Dropper_Stage1Metadata only

  Detects SmartApeSG initial JavaScript file

  MalwareRussianPanda· RussianPanda· 2024-01-11
• RUSSIANPANDA_Smartapesg_JS_Netsupportrat_Stage2Metadata only

  Detects SmartApeSG JavaScript Stage 2 retrieving NetSupportRAT

  GenericRussianPanda· RussianPanda· 2024-01-11
• RUSSIANPANDA_Win_Mal_Glorysprout_StealerMetadata only

  Detects GlorySprout Stealer

  MalwareRussianPanda· RussianPanda· 2024-03-16
• RUSSIANPANDA_Win_Mal_Koistealer_PSMetadata only

  Detects KoiStealer PowerShell script

  MalwareRussianPanda· RussianPanda· 2024-04-04
• RUSSIANPANDA_Win_Mal_ZloaderMetadata only

  Detects Zloader and other Zloader modules that employ the same encryption

  MalwareRussianPanda· RussianPanda· 2024-03-10
• RUSSIANPANDA_ZharkbotMetadata only

  Detects ZharkBot, version 1.2.5

  GenericRussianPanda· RussianPanda· 2024-09-02
• RUSSIANPANDA_Zharkbot_1Metadata only

  Detects ZharkBot

  GenericRussianPanda· RussianPanda· 2024-01-21
• RUSSIANPANDA_Aurorastealer_March_2023Metadata only

  Detects an unobfuscated AuroraStealer March update binary

  Suspicious / huntingRussianPanda· RussianPanda· 2023-03-23
• RUSSIANPANDA_Fakebat_PowershellMetadata only

  Detects FakeBat PowerShell scripts

  GenericRussianPanda· RussianPanda· 2023-12-01
• RUSSIANPANDA_PSWSTEALERMetadata only

  PSWSTEALER

  GenericRussianPanda· RussianPanda· 2023-04-02
• RUSSIANPANDA_Workersdevbackdoor_PSMetadata only

  Detects WorkersDevBackdoor PowerShell script

  GenericRussianPanda· RussianPanda· 2023-12-15
• RUSSIANPANDA_MintsloaderMetadata only

  Detects MintsLoader scripts

  GenericRussianPanda· RussianPanda· 2026-01-16
• RUSSIANPANDA_Solarmarker_LoaderMetadata only

  Detects SolarMarker loader 1-4-2024

  MalwareRussianPanda· RussianPanda· 2024-01-04
• RUSSIANPANDA_MetastealerMetadata only

  Detects the old version of MetaStealer 11-2023

  MalwareRussianPanda· RussianPanda· 2023-11-16
• RUSSIANPANDA_Metastealer_Core_PayloadMetadata only

  Detects MetaStealer Core Payload

  MalwareRussianPanda· RussianPanda· 2023-12-29
• RUSSIANPANDA_DanabotMetadata only

  Detects DanaBot

  MalwareRussianPanda· RussianPanda· 2023-12-01
• RUSSIANPANDA_Metastealer_NET_Reactor_PackerMetadata only

  Detects NET_Reactor_packer 12-2023 used in MetaStealer

  Suspicious / huntingRussianPanda· RussianPanda· 2023-12-29
• RUSSIANPANDA_Win_Mal_Matanbuchus_LoaderMetadata only

  Detects Matanbuchus 3.0 Loader component

  MalwareRussianPanda· RussianPanda· 2025-02-15
• RUSSIANPANDA_JinxloaderMetadata only

  Detects JinxLoader Golang version

  MalwareRussianPanda· RussianPanda· 2024-01-02
• RUSSIANPANDA_Neptune_LoaderMetadata only

  Detects Neptune Loader

  MalwareRussianPanda· RussianPanda· 2024-01-17
• RUSSIANPANDA_Mal_NitrogenMetadata only

  Detects Nitrogen campaign

  MalwareRussianPanda· RussianPanda· 2024-02-04
• RUSSIANPANDA_DucktailMetadata only

  Ducktail Infostealer

  MalwareRussianPanda· RussianPanda· 2023-04-25
• RUSSIANPANDA_Solarmarker_First_Stage_PayloadMetadata only

  Detects SolarMarker First Stage payload

  MalwareRussianPanda· RussianPanda· 2024-01-30
• RUSSIANPANDA_Darkgate_AutoitMetadata only

  Detects DarkGate AutoIT script

  GenericRussianPanda· RussianPanda· 2024-01-26
• RUSSIANPANDA_IllyrianstealerMetadata only

  Detects Illyrian Stealer

  MalwareRussianPanda· RussianPanda· 2024-01-08
• RUSSIANPANDA_Mal_NarniaratMetadata only

  Detects NarniaRAT from BotnetFenix campaign

  MalwareRussianPanda· RussianPanda· 2024-02-02
• RUSSIANPANDA_Win_Mal_XwormMetadata only

  Detects XWorm RAT

  MalwareRussianPanda· RussianPanda· 2024-03-11
• RUSSIANPANDA_SwaetratMetadata only

  Detects SwaetRAT

  GenericRussianPanda· RussianPanda· 2023-11-27
• RUSSIANPANDA_WorkersdevbackdoorMetadata only

  Detects WorkersDevBackdoor

  GenericRussianPanda· RussianPanda· 2023-12-15
• RUSSIANPANDA_Golang_Base64_EncMetadata only

  Detects Base64 Encoding and Decoding patterns in Golang binaries

  GenericRussianPanda· RussianPanda· 2024-01-10
• RUSSIANPANDA_Mal_CleanuploaderMetadata only

  Detects CleanUpLoader

  MalwareRussianPanda· RussianPanda· 2024-02-14
• RUSSIANPANDA_Meduzastealer_1Metadata only

  Detects MeduzaStealer 1-2024

  GenericRussianPanda· RussianPanda· 2024-01-01
• RUSSIANPANDA_PurecrypterMetadata only

  Detects PureCrypter

  GenericRussianPanda· RussianPanda· 2024-01-09
• RUSSIANPANDA_Win_Mal_MpxdropperMetadata only

  Detects MpxDropper

  MalwareRussianPanda· RussianPanda· 2024-03-01
• RUSSIANPANDA_AndeloaderMetadata only

  Detects Ande Loader

  MalwareRussianPanda· RussianPanda· 2023-12-11
• RUSSIANPANDA_Purelogs_Stealer_CoreMetadata only

  Detects Pure Logs Stealer Core Payload

  MalwareRussianPanda· RussianPanda· 2023-12-26
• RUSSIANPANDA_SolarphantomMetadata only

  SolarPhantom Backdoor Detection

  MalwareRussianPanda· RussianPanda· 2023-06-22
• RUSSIANPANDA_WhitesnakestealerMetadata only

  WhiteSnake Stealer

  MalwareRussianPanda· RussianPanda· 2023-07-04
• RUSSIANPANDA_Whitesnakestealer_1Metadata only

  Detects WhiteSnake Stealer XOR samples

  MalwareRussianPanda· RussianPanda· 2023-07-04
• RUSSIANPANDA_Johnwalkertexasloader_V2Metadata only

  Detects JohnWalkerTexasLoader (JWTL)

  GenericRussianPanda· RussianPanda· 2024-10-15
• RUSSIANPANDA_Obfuscation_Powershell_Special_CharsMetadata only

  Detects PowerShell special character obfuscation

  Suspicious / huntingRussianPanda· RussianPanda· 2024-01-12
• RUSSIANPANDA_Purecrypter_CoreMetadata only

  Detects PureCrypter Core payload

  GenericRussianPanda· RussianPanda· 2024-01-09
• RUSSIANPANDA_Truecrypt_CrypterMetadata only

  Detects TrueCrypt crypter

  GenericRussianPanda· RussianPanda· 2024-01-06
• RUSSIANPANDA_Win_Mal_RustydropperMetadata only

  Detects RustyDropper

  MalwareRussianPanda· RussianPanda· 2024-03-01
• RUSSIANPANDA_GarystealerMetadata only

  Detects GaryStealer 1-3-2024

  GenericRussianPanda· RussianPanda· 2024-01-03
• RUSSIANPANDA_Win_Mal_GobitloaderMetadata only

  Detects GoBitLoader

  MalwareRussianPanda· RussianPanda· 2024-03-24
• RUSSIANPANDA_Win_Mal_PlanetstealerMetadata only

  Detects PlanetStealer

  MalwareRussianPanda· RussianPanda· 2024-03-04
• RUSSIANPANDA_Mal_Xred_BackdoorMetadata only

  Detects XRed backdoor

  MalwareRussianPanda· RussianPanda· 2024-02-09
• RUSSIANPANDA_Prysmax_StealerMetadata only

  Detects Prysmax Stealer

  MalwareRussianPanda· RussianPanda· 2024-01-09