Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
23 detections
Filters
Last updated
All Time
Detection languages
22
1
Contributors
20
2
1
Categories
22
2
2
2
2
Platforms
23
2
Products / Services
5
4
2
2
2
MITRE Techniques
18,123
15,639
12,581
8,394
6,215
This YARA rule detects the Dridex banking Trojan by identifying specific byte patterns (API wrapper functions and file search snippets) commonly found in its executables. The rule requires the file to be a Windows executable (MZ header) and contain at least one of the defined API wrapper patterns and one of the file search patterns.
Yara rule that detects Dridex trojan.
Page 2 of 2