Skip to content
yararules.org
Menu

YARA rules tagged INKYPINE

5 rules carry the tag “INKYPINE”.

  • VOLEXITY_Apt_Malware_Py_Bluelight_Ldr

    Python Loader used to execute the BLUELIGHT malware family.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2021-06-22
  • VOLEXITY_Apt_Malware_Rb_Rokrat_Loader

    Ruby loader seen loading the ROKRAT malware family.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2021-06-22
  • VOLEXITY_Apt_Malware_Win_Bluelight

    The BLUELIGHT malware family. Leverages Microsoft OneDrive for network communications.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2021-04-23
  • VOLEXITY_Apt_Malware_Win_Decrok

    The DECROK malware family, which uses the victim's hostname to decrypt and execute an embedded payload.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2021-06-23
  • VOLEXITY_Apt_Malware_Win_Rokload

    A shellcode loader used to decrypt and run an embedded executable.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2021-06-23