Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4 detections
Filters
Last updated
All Time
Detection languages
4
Contributors
2
2
Categories
4
2
Platforms
4
MITRE Techniques
18,115
15,635
12,576
8,388
6,215
Strings based rule for burntcigar malware
Regex based Rule for burntcigar malware
This rule detects the Cuba ransomware based on specific byte patterns found within the executable. The patterns are associated with functions for enumerating resources, finding files, and encrypting files, which are characteristic behaviors of ransomware.
Yara rule that detects Cuba ransomware.