Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

2 detections

This Yara rule detects the Babuk ransomware by identifying specific byte sequences related to its file enumeration, file encryption, and resource enumeration functionalities. The rule looks for distinct patterns in the malware's code that are characteristic of Babuk's operations.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
0032
Yara rule that detects Babuk ransomware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000