YARA rules tagged BACKDOOR

Rule to detect the Main mode component of AcidBox

Rule to detect the SSP DLL component of AcidBox

Detects Winnti variants

Rule to detect CobaltStrike beacon

Rule to detect the Mirai Casper variant

Rule to detect the backdoor pwnlnx variant 1

Rule to detect the backdoor pwnlnx variant 2

Rule to detect the backdoor pwnlnx variant

Rule to detect the backdoor pwnlnx variant 4

Rule to detect the backdoor pwnlnx variant 6

Rule to detect the RedLine payload

Rule to detect samples digitally signed from these stolen certificates