Skip to content

YARA rules tagged RANSOMWARE

26 rules carry the tag “RANSOMWARE”.

  • Rule to detect CryptoNar Ransomware

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2026-09-01
  • Rule to detect the Rietspoof loader

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2026-09-01
  • This rule detect Sodinokobi Ransomware in memory in old samples and perhaps future.

    MalwareTrellix Advanced Research Center· McAfee ATR team· 2026-09-01
  • Detecting variants of Windows BlackCat malware

    MalwareTrellix Advanced Research Center· Trellix ATR· 2022-01-06
  • rule to detect Linux variant of the Hello Kitty Ransomware

    MalwareTrellix Advanced Research Center· Christiaan @ ATR· 2021-07-19
  • Rule to detect Nefilim ransomware

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-03-17
  • Rule to detect Nemty Ransomware

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-02-23
  • Rule to detect Nemty Ransomware version 2.6

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-04-06
  • Rule based on code overlap in RagnarLocker ransomware

    MalwareTrellix Advanced Research Center· McAfee ATR team· 2020-06-14
  • Rule to detect packed and unpacked samples of DarkSide

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-08-11
  • Detect Egregor ransomware

    MalwareTrellix Advanced Research Center· Thomas Roccia | McAfee ATR team· 2020-10-28
  • Rule to detect Exorcist

    MalwareTrellix Advanced Research Center· McAfee ATR Team· 2020-09-01
  • Rule to detect the unpacked Makop ransomware samples

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-07-19
  • Rule to detect the new Nefilim written in GO

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-07-13
  • Rule to detect SunCrypt ransomware

    MalwareTrellix Advanced Research Center· McAfee ATR Team· 2020-10-02
  • Rule to detect SunCrypt ransomware decryptor

    MalwareTrellix Advanced Research Center· McAfee ATR Team· 2020-10-02
  • Rule to detect unpacked samples of WastedLocker

    MalwareTrellix Advanced Research Center· McAfee ATR Team· 2020-07-27
  • Detect Xinof ransomware

    MalwareTrellix Advanced Research Center· Thomas Roccia | McAfee ATR team· 2020-11-20
  • Detect chunk of Xinof ransomware

    MalwareTrellix Advanced Research Center· Thomas Roccia | McAfee ATR Team· 2020-11-20
  • Rule to detect Snake ransomware

    MalwareTrellix Advanced Research Center· McAfee ATR Team· 2020-02-20
  • Rule to detect WannaRen Ransomware

    MalwareTrellix Advanced Research Center· McAfee ATR Team· 2020-04-25
  • Rule to detect Loocipher ransomware

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2019-12-05
  • Rule to detect Netwalker ransomware

    MalwareTrellix Advanced Research Center· McAfee ATR Team· 2020-03-30
  • Rule to detect MegaCortex samples digitally signed

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2026-09-01
  • Rule to detect Nefilim samples digitally signed

    MalwareTrellix Advanced Research Center· Marc Rivero | McAfee ATR Team· 2020-04-02
  • Conti ransomware is havnig capability too scan and encrypt oover the network

    MalwareTrellix Advanced Research Center· McAfee ATR team· 2020-07-09