Browse Rules

Search and filter across all detection sources

414 rules

yara unknown yara

CryptoPP_ApplyFunction [crypto]

CryptoPP ApplyFunction
yara unknown yara

CryptoPP_modulo [crypto]

CryptoPP modulo
yara unknown yara

CryptoPP_RsaFunction [crypto]

CryptoPP RsaFunction
yara unknown yara

CryptoPP_Integer_constructor [crypto]

CryptoPP Integer constructor
yara unknown yara

CryptoPP_a_exp_b_mod_c [crypto]

CryptoPP a_exp_b_mod_c
sagan critical other

[WINDOWS-MALWARE] CryptoLocker file extension detected (.cryptolocker)

[WINDOWS-MALWARE] CryptoLocker file extension detected (.cryptolocker)
sagan critical other

[WINDOWS-MALWARE] CryptoLocker file extension detected (.cryptolocker)

[WINDOWS-MALWARE] CryptoLocker file extension detected (.cryptolocker)
sagan critical other

[WINDOWS-MALWARE] CryptoLocker file extension detected (.cryptolocker)

[WINDOWS-MALWARE] CryptoLocker file extension detected (.cryptolocker)
sagan critical other

[WINDOWS-MALWARE] CryptoLocker file extension detected (.cryptolocker)

[WINDOWS-MALWARE] CryptoLocker file extension detected (.cryptolocker)
yara unknown yara

OpenSSL_DSA [crypto]
yara unknown yara

DarkEYEv3_Cryptor [crypto]

Rule to detect DarkEYEv3 encrypted executables (often malware)
sagan critical other

[WINDOWS-MALWARE] Encrypted file by Cryptowall ransomware extension detected (.cryptowall)

[WINDOWS-MALWARE] Encrypted file by Cryptowall ransomware extension detected (.cryptowall)
sagan critical other

[WINDOWS-MALWARE] Encrypted file by Cryptowall ransomware extension detected (.cryptowall)

[WINDOWS-MALWARE] Encrypted file by Cryptowall ransomware extension detected (.cryptowall)
sagan critical other

[WINDOWS-MALWARE] Encrypted file by Cryptowall ransomware extension detected (.cryptowall)

[WINDOWS-MALWARE] Encrypted file by Cryptowall ransomware extension detected (.cryptowall)
sagan critical other

[WINDOWS-MALWARE] Encrypted file by Cryptowall ransomware extension detected (.cryptowall)

[WINDOWS-MALWARE] Encrypted file by Cryptowall ransomware extension detected (.cryptowall)
yara unknown yara

BigDig_bpInit [crypto]

BigDig bpInit
yara unknown yara

BigDig_mpModExp [crypto]

BigDig mpModExp
yara unknown yara

BigDig_mpModInv [crypto]

BigDig mpModInv
yara unknown yara

BigDig_mpModMult [crypto]

BigDig mpModMult
yara unknown yara

BigDig_mpModulo [crypto]

BigDig mpModulo
yara unknown yara

BigDig_spModExpB [crypto]

BigDig spModExpB
yara unknown yara

BigDig_spModInv [crypto]

BigDig spModInv
yara unknown yara

BigDig_spModMult [crypto]

BigDig spModMult
yara unknown yara

DES_Long [crypto]

DES [long]
yara unknown yara

DES_sbox [crypto]

DES [sbox]