Frank Boldewin (R3c0nst)

Repositorio

https://github.com/fboldewin/YARA-rules

Commit

54e9e6899b258b72074b2b4db6909257683240c2

Obtenido

2026-09-27

Licencia

No licence (all rights reserved)

Publicación

Metadatos

Motivo

No LICENSE file in the repository and no licence statement in its README (checked 2026-09-29). Without a grant, the rules are all rights reserved: metadata and an upstream link only.

Reglas de Frank Boldewin (R3c0nst)

• R3C0NST_StealbitSolo metadatos

  Detects Stealbit used by Lockbit 2.0 Ransomware Gang

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2021-08-12
• R3C0NST_ATM_Malware_DispcashbrSolo metadatos

  Detects ATM Malware DispCashBR

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2020-02-27
• R3C0NST_ATM_Malware_LoupSolo metadatos

  Detects ATM Malware Loup

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2020-08-17
• R3C0NST_Prolock_MalwareSolo metadatos

  Detects Prolock malware in encrypted and decrypted mode

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2020-05-17
• R3C0NST_UNC2891_SlapstickSolo metadatos

  Detects UNC2891 Slapstick pam backdoor

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2022-03-30
• R3C0NST_UNC2891_SteelcorgiSolo metadatos

  Detects UNC2891 Steelcorgi packed ELF binaries

  Sospechoso / huntingFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2022-03-30
• R3C0NST_UNC2891_WinghookSolo metadatos

  Detects UNC2891 Winghook Keylogger

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2022-03-30
• R3C0NST_Aplib_DecompressionSolo metadatos

  Detects aPLib decompression code often used in malware

  MalwareFrank Boldewin (R3c0nst)· @r3c0nst· 2021-03-24
• R3C0NST_Gamaredon_GetimportbyhashSolo metadatos

  Detects Gamaredon APIHashing

  GenéricaFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2021-05-12
• R3C0NST_Shellcode_Apihashing_FIN8Solo metadatos

  Detects FIN8 Shellcode APIHashing

  GenéricaFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2021-03-16
• R3C0NST_ATM_Malware_XFS_ALICESolo metadatos

  Detects ATM Malware ALICE

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2020-01-09
• R3C0NST_UNC2891_CaketapSolo metadatos

  Detects UNC2891 Rootkit Caketap

  GenéricaFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2022-03-30
• R3C0NST_Exploit_Outlook_CVE_2023_23397Solo metadatos

  Detects Outlook appointments exploiting CVE-2023-23397

  ExploitFrank Boldewin (R3c0nst)· Frank Boldewin· 2023-03-19
• R3C0NST_Nighthawk_RATSolo metadatos

  Detects Nighthawk RAT

  Herramienta ofensivaFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2022-11-30
• R3C0NST_ATM_CINEO4060_BlackboxSolo metadatos

  Detects Malware samples for Diebold Nixdorf CINEO 4060 ATMs used in blackboxing attacks across Europe since May 2021

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2021-05-25
• R3C0NST_ATM_Malware_PloutusiSolo metadatos

  Detects Ploutus I .NET samples based on MetabaseQ report

  MalwareFrank Boldewin (R3c0nst)· Frank Boldewin (@r3c0nst)· 2021-03-03