Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
43 detections
Filters
Last updated
All Time
Detection languages
29
4
3
2
2
Contributors
9
9
8
8
3
Categories
11
10
10
8
7
Platforms
28
10
8
5
1
Products / Services
16
6
4
4
4
MITRE Techniques
18,110
15,627
12,575
8,387
6,212
CVEs
3
1
IDS Classtypes
3
1
IDS Protocols
4
This rule detects the GomorrahStealer infostealer by identifying specific bytecode patterns associated with its capabilities. These capabilities include extracting browser autofill data, browser cookies, taking screenshots, gathering antivirus information, and collecting browser history. The rule looks for the presence of all these distinct bytecode signatures within a file to confirm the presence of GomorrahStealer.
Page 3 of 3