• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Sifreli Ransomware Detection

    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    ReversingLabs Yara@ReversingLabsYara
    •updated Oct 8, 2020•0•25

    This YARA rule detects the Sifreli ransomware by identifying specific byte patterns related to file finding, file encryption, and remote connection functionalities. The rule looks for a combination of these patterns within a file to classify it as Sifreli ransomware.

    YARA

    Tags

    S1139 - INC RansomwareT1486 - Data Encrypted for ImpactT1071.001 - Web ProtocolsT1041 - Exfiltration Over C2 ChannelTA0040 - ImpactTA0011 - Command and ControlTA0010 - ExfiltrationMalware DetectedFile Encryption DetectedNetwork ConnectionWindows

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?