Browse Rules

ELF_Linux_Torte [malware]

Detects ELF Linux/Torte infection

Elf_Hash [crypto]

Look for ElfHash

apt_nix_elf_derusbi [yara]

Detects Derusbi Backdoor ELF

merlin_linux_elf [yara_rules]

Detects Merling agent (ELF)

chrome_elf [yara]

Detects Fireball malware - file chrome_elf.dll

ELF_Linux_Torte_domains [malware]

Detects ELF Linux/Torte infection

MAL_ELF_LNX_Mirai_Oct10_1 [yara]

Detects ELF Mirai variant

Potential Vivaldi_elf.DLL Sideloading

Detects potential DLL sideloading of "vivaldi_elf.dll"

apt_nix_elf_derusbi_kernelModule [yara]

Detects Derusbi Backdoor ELF Kernel Module

apt_nix_elf_Derusbi_Linux_Strings [yara]

Detects Derusbi Backdoor ELF Strings

MAL_ELF_LNX_Mirai_Oct10_2 [yara]

Detects ELF malware Mirai related

Potential Vivaldi_elf.DLL Sideloading

Detects potential DLL sideloading of "vivaldi_elf.dll"

apt_nix_elf_Derusbi_Linux_SharedMemCreation [yara]

Detects Derusbi Backdoor ELF Shared Memory Creation

SUSP_ELF_LNX_UPX_Compressed_File [yara]

Detects a suspicious ELF binary with UPX compression

is_elf [malware]

is__elf [malware]

SUSP_LNX_Sindoor_ELF_Obfuscation_Aug25 [yara]

Detects ELF obfuscation technique used by Sindoor dropper related to APT 36

SUSP_ELF_Invalid_Version [yara]

apt_nix_elf_derusbi [malware]

MALW_TinyShell_backconnect_ELF [malware]

apt_nix_elf_derusbi_kernelModule [malware]

apt_nix_elf_Derusbi_Linux_SharedMemCreation [malware]

apt_nix_elf_Derusbi_Linux_Strings [malware]

MAL_ELF_VPNFilter_1 [yara]

Detects VPNFilter malware

MAL_ELF_VPNFilter_2 [yara]

Detects VPNFilter malware