Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

401 detections

This rule detects the MultigrainPOS infostealer by identifying specific byte patterns associated with its data exfiltration, memory scraping (likely for credentials), process searching, and service creation functionalities. It includes two versions of these patterns (v10_1 and v11_1) to cover different variants of the malware. The rule specifically targets executable files (MZ header check).
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
0030
Yara rule that detects HDDCryptor ransomware.
ReversingLabs Yara@ReversingLabsYara
avatar
ReversingLabs Yara
6 years ago
000
Page 20 of 20