Règles YARA avec le tag INKYPINE

5 règles portent le tag « INKYPINE ».

VOLEXITY_Apt_Malware_Py_Bluelight_Ldr
Python Loader used to execute the BLUELIGHT malware family.
APT / acteurVolexity threat-intel· threatintel@volexity.com· 2021-06-22
VOLEXITY_Apt_Malware_Rb_Rokrat_Loader
Ruby loader seen loading the ROKRAT malware family.
APT / acteurVolexity threat-intel· threatintel@volexity.com· 2021-06-22
VOLEXITY_Apt_Malware_Win_Bluelight
The BLUELIGHT malware family. Leverages Microsoft OneDrive for network communications.
APT / acteurVolexity threat-intel· threatintel@volexity.com· 2021-04-23
VOLEXITY_Apt_Malware_Win_Decrok
The DECROK malware family, which uses the victim's hostname to decrypt and execute an embedded payload.
APT / acteurVolexity threat-intel· threatintel@volexity.com· 2021-06-23
VOLEXITY_Apt_Malware_Win_Rokload
A shellcode loader used to decrypt and run an embedded executable.
APT / acteurVolexity threat-intel· threatintel@volexity.com· 2021-06-23