Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Categories
1
1
1
Platforms
1
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
This YARA rule detects the Zoldon ransomware by identifying specific byte patterns associated with its core functionalities. These patterns include sequences related to the main encryption function, the creation of a specific registry key (likely for persistence or configuration), and functions involved in finding files to encrypt. The rule looks for these distinct code segments within executable files.
