YARA rules tagged WINDOWS
4 rules carry the tag “WINDOWS”.
Detects GodRAT malware targeting Windows systems
MalwareSignature Base (Florian Roth / Nextron)· Arda Buyukkaya· 2025-08-23Detects the BACKORDER loader compiled in GO which download and executes a second stage payload from a remote server.
MalwareSignature Base (Florian Roth / Nextron)· Arda Buyukkaya (modified by Florian Roth)· 2025-01-23Detects suspicious encodings in fields used in reference files found in weaponized MS Office documents
Suspicious / huntingSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2021-09-18Detects suspicious encodings in fields used in reference files found in weaponized MS Office documents
Suspicious / huntingSignature Base (Florian Roth / Nextron)· Florian Roth (Nextron Systems)· 2021-09-18