Skip to content
yararules.org
Menu

YARA rules tagged UTA0533

4 rules carry the tag “UTA0533”.

  • VOLEXITY_Apt_Malware_Any_Uta0533_Ua

    Identify any blob containing a bogus user-agent used in different components of an attack attributed to UTA0533.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2026-07-06
  • VOLEXITY_Apt_Malware_Python_Knuckleball

    Detects KNUCKLEBALL, a python based injector malware, using string patterns.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2026-07-06
  • VOLEXITY_Apt_Webshell_Java_Orangetail

    Detection for ORANGETAIL, a custom Java webshell used by UTA0533.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2026-07-06
  • VOLEXITY_Apt_Webshell_Java_Orangetail_B

    Detection for the accept logic of ORANGETAIL, a custom Java webshell used by UTA0533.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2026-07-06