General
-
Target
loki.rar
-
Size
29.2MB
-
MD5
04be53d15d51207a21b4ab9f2f749d9e
-
SHA1
03a6978d5d3416109c566d22dbb9f76946367800
-
SHA256
80efeb4d3a98f5221939a4b6acaf3365efb2d2322fe70f2ff6e57dfe7c16bcd7
-
SHA512
324652db3ecdc4dab48b09e86dbb6cde9b7cea7e703655adf2912e7bf598731f3d8d76eef9ceb519e43dd34df396de750d0d2e99c910fbb29d59588a2f868c1c
-
SSDEEP
786432:S2nC1BeDSZN9OWdwQXUJ/kq550Mz/yVepO:R8SuTOa2Js43z/yVe4
Score
6/10
Malware Config
Signatures
-
Malformed or missing cross-reference table in PDF
Malformed or missing cross-reference tables are often used to evade detection
-
Detects Pyinstaller 2 IoCs
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
Files
-
loki.rar
-
loki/LICENSE
-
loki/README.md
-
loki/_Neo23x0_signature-base.cache
-
loki/_reversinglabs_reversinglabs-yara-rules.cache
-
loki/config/excludes.cfg
-
loki/docs/LICENSE-PE-Sieve
-
loki/docs/LICENSE-doublepulsarcheck
-
loki/loki-upgrade.log
-
loki/loki-upgrader.exe
ba5546933531fafa869b1f86a4e2a959
Headers
Imports
Sections
-
loki-upgrader.pyc
-
loki/loki.exe
ba5546933531fafa869b1f86a4e2a959
Headers
Imports
Sections
-
loki.pyc
-
loki/loki_DESKTOP-VJQ9NVF_2023-09-22_00-10-32.log
-
loki/loki_DESKTOP-VJQ9NVF_2023-09-22_00-11-43.log
-
loki/loki_DESKTOP-VJQ9NVF_2023-09-22_00-12-15.log
-
loki/loki_DESKTOP-VJQ9NVF_2023-09-22_14-41-05.log
-
loki/loki_DESKTOP-VJQ9NVF_2023-09-28_22-51-54.log
-
loki/plugins/loki-plugin-wmi.py
-
loki/requirements.txt
-
loki/signature-base/iocs/README.txt
-
loki/signature-base/iocs/c2-iocs.txt
-
loki/signature-base/iocs/filename-iocs.txt
-
loki/signature-base/iocs/hash-iocs.txt
-
loki/signature-base/iocs/keywords.txt
-
loki/signature-base/iocs/otx-hash-iocs.txt
-
loki/signature-base/misc/file-type-signatures.txt
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Apis.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.ChupaCabra.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Cring.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Dusk.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.EAF.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Eternity.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Fantom.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.GhosTEncryptor.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Ghostbin.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.GoodWill.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.HarpoonLocker.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Hog.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Invert.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Janelle.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Khonsari.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.McBurglar.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Moisha.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Namaste.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Oct.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Pacman.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.PoliceRecords.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Povlsomware.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Retis.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.TaRRaK.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Thanos.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.TimeCrypt.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.TimeTime.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.Venom.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.WildFire.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.WormLocker.yara
-
loki/signature-base/yara/ByteCode.MSIL.Ransomware.ZeroLocker.yara
-
loki/signature-base/yara/Bytecode.MSIL.Ransomware.CobraLocker.yara
-
loki/signature-base/yara/Linux.Ransomware.GwisinLocker.yara
-
loki/signature-base/yara/Linux.Ransomware.KillDisk.yara
-
loki/signature-base/yara/Linux.Ransomware.LuckyJoe.yara
-
loki/signature-base/yara/Linux.Ransomware.RedAlert.yara
-
loki/signature-base/yara/Linux.Virus.Vit.yara
-
loki/signature-base/yara/Win32.Downloader.dlMarlboro.yara
-
loki/signature-base/yara/Win32.Exploit.CVE20200601.yara
-
loki/signature-base/yara/Win32.Infostealer.MultigrainPOS.yara
-
loki/signature-base/yara/Win32.Infostealer.ProjectHookPOS.yara
-
loki/signature-base/yara/Win32.Infostealer.StealC.yara
-
loki/signature-base/yara/Win32.PUA.Domaiq.yara
-
loki/signature-base/yara/Win32.Ransomware.5ss5c.yara
-
loki/signature-base/yara/Win32.Ransomware.ASN1Encoder.yara
-
loki/signature-base/yara/Win32.Ransomware.Acepy.yara
-
loki/signature-base/yara/Win32.Ransomware.Afrodita.yara
-
loki/signature-base/yara/Win32.Ransomware.Ako.yara
-
loki/signature-base/yara/Win32.Ransomware.Alcatraz.yara
-
loki/signature-base/yara/Win32.Ransomware.AnteFrigus.yara
-
loki/signature-base/yara/Win32.Ransomware.Archiveus.yara
-
loki/signature-base/yara/Win32.Ransomware.Armage.yara
-
loki/signature-base/yara/Win32.Ransomware.Atlas.yara
-
loki/signature-base/yara/Win32.Ransomware.Avaddon.yara
-
loki/signature-base/yara/Win32.Ransomware.AvosLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.BKRansomware.yara
-
loki/signature-base/yara/Win32.Ransomware.Babuk.yara
-
loki/signature-base/yara/Win32.Ransomware.BadBlock.yara
-
loki/signature-base/yara/Win32.Ransomware.Badbeeteam.yara
-
loki/signature-base/yara/Win32.Ransomware.Balaclava.yara
-
loki/signature-base/yara/Win32.Ransomware.Bam2021.yara
-
loki/signature-base/yara/Win32.Ransomware.BananaCrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.BandarChor.yara
-
loki/signature-base/yara/Win32.Ransomware.BitCrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.BlackBasta.yara
-
loki/signature-base/yara/Win32.Ransomware.BlackCat.yara
-
loki/signature-base/yara/Win32.Ransomware.BlackMoon.yara
-
loki/signature-base/yara/Win32.Ransomware.Blitzkrieg.yara
-
loki/signature-base/yara/Win32.Ransomware.BlueLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.BrainCrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.Buran.yara
-
loki/signature-base/yara/Win32.Ransomware.ChiChi.yara
-
loki/signature-base/yara/Win32.Ransomware.Cincoo.yara
-
loki/signature-base/yara/Win32.Ransomware.Clop.yara
-
loki/signature-base/yara/Win32.Ransomware.Conti.yara
-
loki/signature-base/yara/Win32.Ransomware.Cryakl.yara
-
loki/signature-base/yara/Win32.Ransomware.Crypmic.yara
-
loki/signature-base/yara/Win32.Ransomware.Crypren.yara
-
loki/signature-base/yara/Win32.Ransomware.CryptoBit.yara
-
loki/signature-base/yara/Win32.Ransomware.CryptoFortress.yara
-
loki/signature-base/yara/Win32.Ransomware.CryptoJoker.yara
-
loki/signature-base/yara/Win32.Ransomware.CryptoLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.CryptoWall.yara
-
loki/signature-base/yara/Win32.Ransomware.Crysis.yara
-
loki/signature-base/yara/Win32.Ransomware.Cuba.yara
-
loki/signature-base/yara/Win32.Ransomware.DMALocker.yara
-
loki/signature-base/yara/Win32.Ransomware.DMR.yara
-
loki/signature-base/yara/Win32.Ransomware.DarkSide.yara
-
loki/signature-base/yara/Win32.Ransomware.DearCry.yara
-
loki/signature-base/yara/Win32.Ransomware.Defray.yara
-
loki/signature-base/yara/Win32.Ransomware.Delphimorix.yara
-
loki/signature-base/yara/Win32.Ransomware.DenizKizi.yara
-
loki/signature-base/yara/Win32.Ransomware.DesuCrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.Dharma.yara
-
loki/signature-base/yara/Win32.Ransomware.DirtyDecrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.District.yara
-
loki/signature-base/yara/Win32.Ransomware.DogeCrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.Dragon.yara
-
loki/signature-base/yara/Win32.Ransomware.Dualshot.yara
-
loki/signature-base/yara/Win32.Ransomware.Encoded01.yara
-
loki/signature-base/yara/Win32.Ransomware.Erica.yara
-
loki/signature-base/yara/Win32.Ransomware.FCT.yara
-
loki/signature-base/yara/Win32.Ransomware.FLKR.yara
-
loki/signature-base/yara/Win32.Ransomware.FarAttack.yara
-
loki/signature-base/yara/Win32.Ransomware.FenixLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.Ferrlock.yara
-
loki/signature-base/yara/Win32.Ransomware.Flamingo.yara
-
loki/signature-base/yara/Win32.Ransomware.FuxSocy.yara
-
loki/signature-base/yara/Win32.Ransomware.GPGQwerty.yara
-
loki/signature-base/yara/Win32.Ransomware.GandCrab.yara
-
loki/signature-base/yara/Win32.Ransomware.GarrantyDecrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.Gibon.yara
-
loki/signature-base/yara/Win32.Ransomware.GlobeImposter.yara
-
loki/signature-base/yara/Win32.Ransomware.Gomer.yara
-
loki/signature-base/yara/Win32.Ransomware.Good.yara
-
loki/signature-base/yara/Win32.Ransomware.Gpcode.yara
-
loki/signature-base/yara/Win32.Ransomware.GusCrypter.yara
-
loki/signature-base/yara/Win32.Ransomware.HDDCryptor.yara
-
loki/signature-base/yara/Win32.Ransomware.HDMR.yara
-
loki/signature-base/yara/Win32.Ransomware.HakunaMatata.yara
-
loki/signature-base/yara/Win32.Ransomware.Henry.yara
-
loki/signature-base/yara/Win32.Ransomware.HentaiOniichan.yara
-
loki/signature-base/yara/Win32.Ransomware.Hermes.yara
-
loki/signature-base/yara/Win32.Ransomware.Horsedeal.yara
-
loki/signature-base/yara/Win32.Ransomware.HowAreYou.yara
-
loki/signature-base/yara/Win32.Ransomware.HydraCrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.IFN643.yara
-
loki/signature-base/yara/Win32.Ransomware.InfoDot.yara
-
loki/signature-base/yara/Win32.Ransomware.JSWorm.yara
-
loki/signature-base/yara/Win32.Ransomware.Jamper.yara
-
loki/signature-base/yara/Win32.Ransomware.Jemd.yara
-
loki/signature-base/yara/Win32.Ransomware.Jormungand.yara
-
loki/signature-base/yara/Win32.Ransomware.JuicyLemon.yara
-
loki/signature-base/yara/Win32.Ransomware.Kangaroo.yara
-
loki/signature-base/yara/Win32.Ransomware.KawaiiLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.KillDisk.yara
-
loki/signature-base/yara/Win32.Ransomware.Knot.yara
-
loki/signature-base/yara/Win32.Ransomware.Kovter.yara
-
loki/signature-base/yara/Win32.Ransomware.Koxic.yara
-
loki/signature-base/yara/Win32.Ransomware.Kraken.yara
-
loki/signature-base/yara/Win32.Ransomware.Ladon.yara
-
loki/signature-base/yara/Win32.Ransomware.LeChiffre.yara
-
loki/signature-base/yara/Win32.Ransomware.LockBit.yara
-
loki/signature-base/yara/Win32.Ransomware.Lolkek.yara
-
loki/signature-base/yara/Win32.Ransomware.LooCipher.yara
-
loki/signature-base/yara/Win32.Ransomware.Lorenz.yara
-
loki/signature-base/yara/Win32.Ransomware.MRAC.yara
-
loki/signature-base/yara/Win32.Ransomware.MZP.yara
-
loki/signature-base/yara/Win32.Ransomware.Mafia.yara
-
loki/signature-base/yara/Win32.Ransomware.Magniber.yara
-
loki/signature-base/yara/Win32.Ransomware.Major.yara
-
loki/signature-base/yara/Win32.Ransomware.Makop.yara
-
loki/signature-base/yara/Win32.Ransomware.Maktub.yara
-
loki/signature-base/yara/Win32.Ransomware.Marlboro.yara
-
loki/signature-base/yara/Win32.Ransomware.MarsJoke.yara
-
loki/signature-base/yara/Win32.Ransomware.Matsnu.yara
-
loki/signature-base/yara/Win32.Ransomware.MedusaLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.Meow.yara
-
loki/signature-base/yara/Win32.Ransomware.Monalisa.yara
-
loki/signature-base/yara/Win32.Ransomware.Montserrat.yara
-
loki/signature-base/yara/Win32.Ransomware.Motocos.yara
-
loki/signature-base/yara/Win32.Ransomware.MountLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.NB65.yara
-
loki/signature-base/yara/Win32.Ransomware.NanoLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.Nefilim.yara
-
loki/signature-base/yara/Win32.Ransomware.Nemty.yara
-
loki/signature-base/yara/Win32.Ransomware.Networm.yara
-
loki/signature-base/yara/Win32.Ransomware.NotPetya.yara
-
loki/signature-base/yara/Win32.Ransomware.Oni.yara
-
loki/signature-base/yara/Win32.Ransomware.OphionLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.Ouroboros.yara
-
loki/signature-base/yara/Win32.Ransomware.Outsider.yara
-
loki/signature-base/yara/Win32.Ransomware.PXJ.yara
-
loki/signature-base/yara/Win32.Ransomware.Paradise.yara
-
loki/signature-base/yara/Win32.Ransomware.Pay2Key.yara
-
loki/signature-base/yara/Win32.Ransomware.Petya.yara
-
loki/signature-base/yara/Win32.Ransomware.Plague17.yara
-
loki/signature-base/yara/Win32.Ransomware.PrincessLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.Prometey.yara
-
loki/signature-base/yara/Win32.Ransomware.RagnarLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.Ragnarok.yara
-
loki/signature-base/yara/Win32.Ransomware.Ransoc.yara
-
loki/signature-base/yara/Win32.Ransomware.RansomPlus.yara
-
loki/signature-base/yara/Win32.Ransomware.Ransomexx.yara
-
loki/signature-base/yara/Win32.Ransomware.Redeemer.yara
-
loki/signature-base/yara/Win32.Ransomware.RegretLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.RetMyData.yara
-
loki/signature-base/yara/Win32.Ransomware.Reveton.yara
-
loki/signature-base/yara/Win32.Ransomware.Revil.yara
-
loki/signature-base/yara/Win32.Ransomware.Rokku.yara
-
loki/signature-base/yara/Win32.Ransomware.Ryuk.yara
-
loki/signature-base/yara/Win32.Ransomware.Sage.yara
-
loki/signature-base/yara/Win32.Ransomware.Sanwai.yara
-
loki/signature-base/yara/Win32.Ransomware.Sarbloh.yara
-
loki/signature-base/yara/Win32.Ransomware.Satan.yara
-
loki/signature-base/yara/Win32.Ransomware.Satana.yara
-
loki/signature-base/yara/Win32.Ransomware.Saturn.yara
-
loki/signature-base/yara/Win32.Ransomware.Sepsis.yara
-
loki/signature-base/yara/Win32.Ransomware.Serpent.yara
-
loki/signature-base/yara/Win32.Ransomware.SevenSevenSeven.yara
-
loki/signature-base/yara/Win32.Ransomware.ShadowCryptor.yara
-
loki/signature-base/yara/Win32.Ransomware.Sherminator.yara
-
loki/signature-base/yara/Win32.Ransomware.Sifrelendi.yara
-
loki/signature-base/yara/Win32.Ransomware.Sifreli.yara
-
loki/signature-base/yara/Win32.Ransomware.Sigrun.yara
-
loki/signature-base/yara/Win32.Ransomware.Skystars.yara
-
loki/signature-base/yara/Win32.Ransomware.Spora.yara
-
loki/signature-base/yara/Win32.Ransomware.TBLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.TargetCompany.yara
-
loki/signature-base/yara/Win32.Ransomware.TechandStrat.yara
-
loki/signature-base/yara/Win32.Ransomware.TeleCrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.Termite.yara
-
loki/signature-base/yara/Win32.Ransomware.Teslacrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.Teslarvng.yara
-
loki/signature-base/yara/Win32.Ransomware.Thanatos.yara
-
loki/signature-base/yara/Win32.Ransomware.TorrentLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.VHDLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.VegaLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.Velso.yara
-
loki/signature-base/yara/Win32.Ransomware.WannaCry.yara
-
loki/signature-base/yara/Win32.Ransomware.WaspLocker.yara
-
loki/signature-base/yara/Win32.Ransomware.Wastedlocker.yara
-
loki/signature-base/yara/Win32.Ransomware.WinWord64.yara
-
loki/signature-base/yara/Win32.Ransomware.WsIR.yara
-
loki/signature-base/yara/Win32.Ransomware.Xorist.yara
-
loki/signature-base/yara/Win32.Ransomware.Zeoticus.yara
-
loki/signature-base/yara/Win32.Ransomware.Zeppelin.yara
-
loki/signature-base/yara/Win32.Ransomware.ZeroCrypt.yara
-
loki/signature-base/yara/Win32.Ransomware.Zhen.yara
-
loki/signature-base/yara/Win32.Ransomware.Zoldon.yara
-
loki/signature-base/yara/Win32.Trojan.CaddyWiper.yara
-
loki/signature-base/yara/Win32.Trojan.Dridex.yara
-
loki/signature-base/yara/Win32.Trojan.Emotet.yara
-
loki/signature-base/yara/Win32.Trojan.HermeticWiper.yara
-
loki/signature-base/yara/Win32.Trojan.IsaacWiper.yara
-
loki/signature-base/yara/Win32.Trojan.TrickBot.yara
-
loki/signature-base/yara/Win32.Virus.Awfull.yara
-
loki/signature-base/yara/Win32.Virus.Cmay.yara
-
loki/signature-base/yara/Win32.Virus.DeadCode.yara
-
loki/signature-base/yara/Win32.Virus.Elerad.yara
-
loki/signature-base/yara/Win32.Virus.Greenp.yara
-
loki/signature-base/yara/Win32.Virus.Mocket.yara
-
loki/signature-base/yara/Win32.Virus.Negt.yara
-
loki/signature-base/yara/Win64.Backdoor.Minodo.yara
-
loki/signature-base/yara/Win64.Ransomware.Ako.yara
-
loki/signature-base/yara/Win64.Ransomware.AntiWar.yara
-
loki/signature-base/yara/Win64.Ransomware.AwesomeScott.yara
-
loki/signature-base/yara/Win64.Ransomware.BlackBasta.yara
-
loki/signature-base/yara/Win64.Ransomware.Curator.yara
-
loki/signature-base/yara/Win64.Ransomware.DST.yara
-
loki/signature-base/yara/Win64.Ransomware.HermeticRansom.yara
-
loki/signature-base/yara/Win64.Ransomware.HotCoffee.yara
-
loki/signature-base/yara/Win64.Ransomware.Nokoyawa.yara
-
loki/signature-base/yara/Win64.Ransomware.Pandora.yara
-
loki/signature-base/yara/Win64.Ransomware.RedRoman.yara
-
loki/signature-base/yara/Win64.Ransomware.Rook.yara
-
loki/signature-base/yara/Win64.Ransomware.SeedLocker.yara
-
loki/signature-base/yara/Win64.Ransomware.Seth.yara
-
loki/signature-base/yara/Win64.Ransomware.Solaso.yara
-
loki/signature-base/yara/Win64.Ransomware.Vovalex.yara
-
loki/signature-base/yara/Win64.Ransomware.WhiteBlackCrypt.yara
-
loki/signature-base/yara/Win64.Ransomware.Wintenzz.yara
-
loki/signature-base/yara/airbnb_binaryalert.yar
-
loki/signature-base/yara/apt_aa19_024a.yar
-
loki/signature-base/yara/apt_agent_btz.yar
-
loki/signature-base/yara/apt_alienspy_rat.yar
-
loki/signature-base/yara/apt_apt10.yar
-
loki/signature-base/yara/apt_apt10_redleaves.yar
-
loki/signature-base/yara/apt_apt12_malware.yar
-
loki/signature-base/yara/apt_apt15.yar
-
loki/signature-base/yara/apt_apt17_mal_sep17.yar
-
loki/signature-base/yara/apt_apt17_malware.yar
-
loki/signature-base/yara/apt_apt19.yar
-
loki/signature-base/yara/apt_apt27_hyperbro.yar
-
loki/signature-base/yara/apt_apt28.yar
-
loki/signature-base/yara/apt_apt28_drovorub.yar
-
loki/signature-base/yara/apt_apt29_grizzly_steppe.yar
-
loki/signature-base/yara/apt_apt29_nobelium_apr22.yar
-
loki/signature-base/yara/apt_apt29_nobelium_may21.yar
-
loki/signature-base/yara/apt_apt30_backspace.yar
-
loki/signature-base/yara/apt_apt32.yar
-
loki/signature-base/yara/apt_apt34.yar
-
loki/signature-base/yara/apt_apt37.yar
-
loki/signature-base/yara/apt_apt37_bluelight.yar
-
loki/signature-base/yara/apt_apt3_bemstour.yar
-
loki/signature-base/yara/apt_apt41.yar
-
loki/signature-base/yara/apt_apt6_malware.yar
-
loki/signature-base/yara/apt_ar18_165a.yar
-
loki/signature-base/yara/apt_area1_phishing_diplomacy.yar
-
loki/signature-base/yara/apt_aus_parl_compromise.yar
-
loki/signature-base/yara/apt_babyshark.yar
-
loki/signature-base/yara/apt_backdoor_ssh_python.yar
-
loki/signature-base/yara/apt_backdoor_sunburst_fnv1a_experimental.yar
-
loki/signature-base/yara/apt_backspace.yar
-
loki/signature-base/yara/apt_barracuda_esg_unc4841_jun23.yar
-
loki/signature-base/yara/apt_beepservice.yar
-
loki/signature-base/yara/apt_between-hk-and-burma.yar
-
loki/signature-base/yara/apt_bigbang.yar
-
loki/signature-base/yara/apt_bitter.yar
-
loki/signature-base/yara/apt_blackenergy.yar
-
loki/signature-base/yara/apt_blackenergy_installer.yar
-
loki/signature-base/yara/apt_bluetermite_emdivi.yar
-
loki/signature-base/yara/apt_bronze_butler.yar
-
loki/signature-base/yara/apt_buckeye.yar
-
loki/signature-base/yara/apt_candiru.yar
-
loki/signature-base/yara/apt_carbon_paper_turla.yar
-
loki/signature-base/yara/apt_casper.yar
-
loki/signature-base/yara/apt_cheshirecat.yar
-
loki/signature-base/yara/apt_cloudatlas.yar
-
loki/signature-base/yara/apt_cloudduke.yar
-
loki/signature-base/yara/apt_cmstar.yar
-
loki/signature-base/yara/apt_cn_netfilter.yar
-
loki/signature-base/yara/apt_cn_pp_zerot.yar
-
loki/signature-base/yara/apt_cn_reddelta.yar
-
loki/signature-base/yara/apt_cn_twisted_panda.yar
-
loki/signature-base/yara/apt_cobaltstrike.yar
-
loki/signature-base/yara/apt_cobaltstrike_evasive.yar
-
loki/signature-base/yara/apt_codoso.yar
-
loki/signature-base/yara/apt_coreimpact_agent.yar
-
loki/signature-base/yara/apt_danti_svcmondr.yar
-
loki/signature-base/yara/apt_darkcaracal.yar
-
loki/signature-base/yara/apt_darkhydrus.yar
-
loki/signature-base/yara/apt_deeppanda.yar
-
loki/signature-base/yara/apt_derusbi.yar
-
loki/signature-base/yara/apt_dnspionage.yar
-
loki/signature-base/yara/apt_donotteam_ytyframework.yar
-
loki/signature-base/yara/apt_dragonfly.yar
-
loki/signature-base/yara/apt_dtrack.yar
-
loki/signature-base/yara/apt_dubnium.yar
-
loki/signature-base/yara/apt_duqu1_5_modules.yar
-
loki/signature-base/yara/apt_duqu2.yar
-
loki/signature-base/yara/apt_dustman.yar
-
loki/signature-base/yara/apt_emissary.yar
-
loki/signature-base/yara/apt_eqgrp.yar
-
loki/signature-base/yara/apt_eqgrp_apr17.yar
-
loki/signature-base/yara/apt_eqgrp_sparc_sbz_apr23.yar
-
loki/signature-base/yara/apt_eqgrp_triangulation_jun23.yar
-
loki/signature-base/yara/apt_eternalblue_non_wannacry.yar
-
loki/signature-base/yara/apt_exile_rat.yar
-
loki/signature-base/yara/apt_f5_bigip_expl_payloads.yar
-
loki/signature-base/yara/apt_fakem_backdoor.yar
-
loki/signature-base/yara/apt_fancybear_computrace_agent.yar
-
loki/signature-base/yara/apt_fancybear_dnc.yar
-
loki/signature-base/yara/apt_fancybear_osxagent.yar
-
loki/signature-base/yara/apt_fidelis_phishing_plain_sight.yar
-
loki/signature-base/yara/apt_fin7.yar
-
loki/signature-base/yara/apt_fin7_backdoor.yar
-
loki/signature-base/yara/apt_fin8.yar
-
loki/signature-base/yara/apt_flame2_orchestrator.yar
-
loki/signature-base/yara/apt_foudre.yar
-
loki/signature-base/yara/apt_four_element_sword.yar
-
loki/signature-base/yara/apt_freemilk.yar
-
loki/signature-base/yara/apt_fujinama_rat.yar
-
loki/signature-base/yara/apt_furtim.yar
-
loki/signature-base/yara/apt_fvey_shadowbroker_dec16.yar
-
loki/signature-base/yara/apt_fvey_shadowbroker_jan17.yar
-
loki/signature-base/yara/apt_ghostdragon_gh0st_rat.yar
-
loki/signature-base/yara/apt_glassRAT.yar
-
loki/signature-base/yara/apt_golddragon.yar
-
loki/signature-base/yara/apt_goldenspy.yar
-
loki/signature-base/yara/apt_greenbug.yar
-
loki/signature-base/yara/apt_greyenergy.yar
-
loki/signature-base/yara/apt_grizzlybear_uscert.yar
-
loki/signature-base/yara/apt_hackingteam_rules.yar
-
loki/signature-base/yara/apt_hafnium.yar
-
loki/signature-base/yara/apt_hafnium_log_sigs.yar
-
loki/signature-base/yara/apt_ham_tofu_chches.yar
-
loki/signature-base/yara/apt_hatman.yar
-
loki/signature-base/yara/apt_hellsing_kaspersky.yar
-
loki/signature-base/yara/apt_hidden_cobra.yar
-
loki/signature-base/yara/apt_hiddencobra_bankshot.yar
-
loki/signature-base/yara/apt_hiddencobra_wiper.yar
-
loki/signature-base/yara/apt_hizor_rat.yar
-
loki/signature-base/yara/apt_hkdoor.yar
-
loki/signature-base/yara/apt_iamtheking.yar
-
loki/signature-base/yara/apt_icefog.yar
-
loki/signature-base/yara/apt_indetectables_rat.yar
-
loki/signature-base/yara/apt_industroyer.yar
-
loki/signature-base/yara/apt_inocnation.yar
-
loki/signature-base/yara/apt_irongate.yar
-
loki/signature-base/yara/apt_irontiger.yar
-
loki/signature-base/yara/apt_irontiger_trendmicro.yar
-
loki/signature-base/yara/apt_ism_rat.yar
-
loki/signature-base/yara/apt_kaspersky_duqu2.yar
-
loki/signature-base/yara/apt_ke3chang.yar
-
loki/signature-base/yara/apt_keyboys.yar
-
loki/signature-base/yara/apt_keylogger_cn.yar
-
loki/signature-base/yara/apt_khrat.yar
-
loki/signature-base/yara/apt_korplug_fast.yar
-
loki/signature-base/yara/apt_kwampirs.yar
-
loki/signature-base/yara/apt_laudanum_webshells.yar
-
loki/signature-base/yara/apt_lazarus_applejeus.yar
-
loki/signature-base/yara/apt_lazarus_aug20.yar
-
loki/signature-base/yara/apt_lazarus_dec17.yar
-
loki/signature-base/yara/apt_lazarus_dec20.yar
-
loki/signature-base/yara/apt_lazarus_gopuram.yar
-
loki/signature-base/yara/apt_lazarus_jan21.yar
-
loki/signature-base/yara/apt_lazarus_jun18.yar
-
loki/signature-base/yara/apt_lazarus_vhd_ransomware.yar
-
loki/signature-base/yara/apt_leviathan.yar
-
loki/signature-base/yara/apt_lnx_kobalos.yar
-
loki/signature-base/yara/apt_lnx_linadoor_rootkit.yar
-
loki/signature-base/yara/apt_lotusblossom_elise.yar
-
loki/signature-base/yara/apt_magichound.yar
-
loki/signature-base/yara/apt_mal_gopuram_apr23.yar
-
loki/signature-base/yara/apt_mal_ilo_board_elf.yar
-
loki/signature-base/yara/apt_mal_ru_snake_may23.yar
-
loki/signature-base/yara/apt_microcin.yar
-
loki/signature-base/yara/apt_middle_east_talosreport.yar
-
loki/signature-base/yara/apt_miniasp.yar
-
loki/signature-base/yara/apt_minidionis.yar
-
loki/signature-base/yara/apt_mofang.yar
-
loki/signature-base/yara/apt_molerats_jul17.yar
-
loki/signature-base/yara/apt_monsoon.yar
-
loki/signature-base/yara/apt_moonlightmaze.yar
-
loki/signature-base/yara/apt_ms_platinum.yara
-
loki/signature-base/yara/apt_muddywater.yar
-
loki/signature-base/yara/apt_naikon.yar
-
loki/signature-base/yara/apt_nanocore_rat.yar
-
loki/signature-base/yara/apt_nazar.yar
-
loki/signature-base/yara/apt_ncsc_report_04_2018.yar
-
loki/signature-base/yara/apt_netwire_rat.yar
-
loki/signature-base/yara/apt_nk_gen.yar
-
loki/signature-base/yara/apt_nk_goldbackdoor.yar
-
loki/signature-base/yara/apt_nk_inkysquid.yar
-
loki/signature-base/yara/apt_nk_tradingtech_apr23.yar
-
loki/signature-base/yara/apt_oilrig.yar
-
loki/signature-base/yara/apt_oilrig_chafer_mar18.yar
-
loki/signature-base/yara/apt_oilrig_oct17.yar
-
loki/signature-base/yara/apt_oilrig_rgdoor.yar
-
loki/signature-base/yara/apt_olympic_destroyer.yar
-
loki/signature-base/yara/apt_onhat_proxy.yar
-
loki/signature-base/yara/apt_op_cleaver.yar
-
loki/signature-base/yara/apt_op_cloudhopper.yar
-
loki/signature-base/yara/apt_op_honeybee.yar
-
loki/signature-base/yara/apt_op_shadowhammer.yar
-
loki/signature-base/yara/apt_op_wocao.yar
-
loki/signature-base/yara/apt_passcv.yar
-
loki/signature-base/yara/apt_passthehashtoolkit.yar
-
loki/signature-base/yara/apt_patchwork.yar
-
loki/signature-base/yara/apt_plead_downloader.yar
-
loki/signature-base/yara/apt_plugx.yar
-
loki/signature-base/yara/apt_poisonivy.yar
-
loki/signature-base/yara/apt_poisonivy_gen3.yar
-
loki/signature-base/yara/apt_poseidon_group.yar
-
loki/signature-base/yara/apt_poshspy.yar
-
loki/signature-base/yara/apt_prikormka.yar
-
loki/signature-base/yara/apt_project_m.yar
-
loki/signature-base/yara/apt_project_sauron.yara
-
loki/signature-base/yara/apt_project_sauron_extras.yar
-
loki/signature-base/yara/apt_promethium_neodymium.yar
-
loki/signature-base/yara/apt_pulsesecure.yar
-
loki/signature-base/yara/apt_putterpanda.yar
-
loki/signature-base/yara/apt_quarkspwdump.yar
-
loki/signature-base/yara/apt_quasar_rat.yar
-
loki/signature-base/yara/apt_quasar_vermin.yar
-
loki/signature-base/yara/apt_rancor.yar
-
loki/signature-base/yara/apt_ransom_darkbit_feb23.yar
-
loki/signature-base/yara/apt_ransom_vicesociety_dec22.yar
-
loki/signature-base/yara/apt_reaver_sunorcal.yar
-
loki/signature-base/yara/apt_rehashed_rat.yar
-
loki/signature-base/yara/apt_revenge_rat.yar
-
loki/signature-base/yara/apt_rocketkitten_keylogger.yar
-
loki/signature-base/yara/apt_rokrat.yar
-
loki/signature-base/yara/apt_royalroad.yar
-
loki/signature-base/yara/apt_ru_crywiper.yar
-
loki/signature-base/yara/apt_ruag.yar
-
loki/signature-base/yara/apt_rwmc_powershell_creddump.yar
-
loki/signature-base/yara/apt_sakula.yar
-
loki/signature-base/yara/apt_sandworm_centreon.yar
-
loki/signature-base/yara/apt_sandworm_cyclops_blink.yar
-
loki/signature-base/yara/apt_sandworm_exim_expl.yar
-
loki/signature-base/yara/apt_saudi_aramco_phish.yar
-
loki/signature-base/yara/apt_scanbox_deeppanda.yar
-
loki/signature-base/yara/apt_scarcruft.yar
-
loki/signature-base/yara/apt_seaduke_unit42.yar
-
loki/signature-base/yara/apt_sednit_delphidownloader.yar
-
loki/signature-base/yara/apt_servantshell.yar
-
loki/signature-base/yara/apt_shadowpad.yar
-
loki/signature-base/yara/apt_shamoon.yar
-
loki/signature-base/yara/apt_shamoon2.yar
-
loki/signature-base/yara/apt_sharptongue.yar
-
loki/signature-base/yara/apt_shellcrew_streamex.yar
-
loki/signature-base/yara/apt_sidewinder.yar
-
loki/signature-base/yara/apt_silence.yar
-
loki/signature-base/yara/apt_skeletonkey.yar
-
loki/signature-base/yara/apt_slingshot.yar
-
loki/signature-base/yara/apt_snaketurla_osx.yar
-
loki/signature-base/yara/apt_snowglobe_babar.yar
-
loki/signature-base/yara/apt_sofacy.yar
-
loki/signature-base/yara/apt_sofacy_cannon.yar
-
loki/signature-base/yara/apt_sofacy_dec15.yar
-
loki/signature-base/yara/apt_sofacy_fysbis.yar
-
loki/signature-base/yara/apt_sofacy_hospitality.yar
-
loki/signature-base/yara/apt_sofacy_jun16.yar
-
loki/signature-base/yara/apt_sofacy_oct17_camp.yar
-
loki/signature-base/yara/apt_sofacy_xtunnel_bundestag.yar
-
loki/signature-base/yara/apt_sofacy_zebrocy.yar
-
loki/signature-base/yara/apt_solarwinds_sunburst.yar
-
loki/signature-base/yara/apt_solarwinds_susp_sunburst.yar
-
loki/signature-base/yara/apt_sphinx_moth.yar
-
loki/signature-base/yara/apt_stealer_cisa_ar22_277a.yar
-
loki/signature-base/yara/apt_stonedrill.yar
-
loki/signature-base/yara/apt_strider.yara
-
loki/signature-base/yara/apt_stuxnet.yar
-
loki/signature-base/yara/apt_stuxshop.yar
-
loki/signature-base/yara/apt_suckfly.yar
-
loki/signature-base/yara/apt_sunspot.yar
-
loki/signature-base/yara/apt_sysscan.yar
-
loki/signature-base/yara/apt_ta17_293A.yar
-
loki/signature-base/yara/apt_ta17_318A.yar
-
loki/signature-base/yara/apt_ta17_318B.yar
-
loki/signature-base/yara/apt_ta18_074A.yar
-
loki/signature-base/yara/apt_ta18_149A.yar
-
loki/signature-base/yara/apt_ta459.yar
-
loki/signature-base/yara/apt_telebots.yar
-
loki/signature-base/yara/apt_terracotta.yar
-
loki/signature-base/yara/apt_terracotta_liudoor.yar
-
loki/signature-base/yara/apt_tetris.yar
-
loki/signature-base/yara/apt_threatgroup_3390.yar
-
loki/signature-base/yara/apt_thrip.yar
-
loki/signature-base/yara/apt_tick_datper.yar
-
loki/signature-base/yara/apt_tick_weaponized_usb.yar
-
loki/signature-base/yara/apt_tidepool.yar
-
loki/signature-base/yara/apt_tophat.yar
-
loki/signature-base/yara/apt_triton.yar
-
loki/signature-base/yara/apt_triton_mal_sshdoor.yar
-
loki/signature-base/yara/apt_turbo_campaign.yar
-
loki/signature-base/yara/apt_turla.yar
-
loki/signature-base/yara/apt_turla_gazer.yar
-
loki/signature-base/yara/apt_turla_kazuar.yar
-
loki/signature-base/yara/apt_turla_mosquito.yar
-
loki/signature-base/yara/apt_turla_neuron.yar
-
loki/signature-base/yara/apt_turla_penquin.yar
-
loki/signature-base/yara/apt_turla_png_dropper_nov18.yar
-
loki/signature-base/yara/apt_ua_caddywiper.yar
-
loki/signature-base/yara/apt_ua_hermetic_wiper.yar
-
loki/signature-base/yara/apt_ua_isaacwiper.yar
-
loki/signature-base/yara/apt_ua_wiper_whispergate.yar
-
loki/signature-base/yara/apt_uboat_rat.yar
-
loki/signature-base/yara/apt_unc1151_ua.yar
-
loki/signature-base/yara/apt_unc2447_sombrat.yar
-
loki/signature-base/yara/apt_unc2546_dewmode.yar
-
loki/signature-base/yara/apt_unc2891_mal_jan23.yar
-
loki/signature-base/yara/apt_unc3886_virtualpita.yar
-
loki/signature-base/yara/apt_unit78020_malware.yar
-
loki/signature-base/yara/apt_uscert_ta17-1117a.yar
-
loki/signature-base/yara/apt_venom_linux_rootkit.yar
-
loki/signature-base/yara/apt_volatile_cedar.yar
-
loki/signature-base/yara/apt_vpnfilter.yar
-
loki/signature-base/yara/apt_waterbear.yar
-
loki/signature-base/yara/apt_waterbug.yar
-
loki/signature-base/yara/apt_webmonitor_rat.yar
-
loki/signature-base/yara/apt_webshell_chinachopper.yar
-
loki/signature-base/yara/apt_wildneutron.yar
-
loki/signature-base/yara/apt_wilted_tulip.yar
-
loki/signature-base/yara/apt_win_plugx.yar
-
loki/signature-base/yara/apt_winnti.yar
-
loki/signature-base/yara/apt_winnti_br.yar
-
loki/signature-base/yara/apt_winnti_burning_umbrella.yar
-
loki/signature-base/yara/apt_winnti_hdroot.yar
-
loki/signature-base/yara/apt_winnti_linux.yar
-
loki/signature-base/yara/apt_winnti_ms_report_201701.yar
-
loki/signature-base/yara/apt_woolengoldfish.yar
-
loki/signature-base/yara/apt_xrat.yar
-
loki/signature-base/yara/apt_zxshell.yar
-
loki/signature-base/yara/blocklist.yara
-
loki/signature-base/yara/cn_pentestset_scripts.yar
-
loki/signature-base/yara/cn_pentestset_tools.yar
-
loki/signature-base/yara/cn_pentestset_webshells.yar
-
loki/signature-base/yara/configured_vulns_ext_vars.yar
-
loki/signature-base/yara/crime_academic_data_centers_camp_may20.yar
-
loki/signature-base/yara/crime_andromeda_jun17.yar
-
loki/signature-base/yara/crime_antifw_installrex.yar
-
loki/signature-base/yara/crime_atm_dispenserxfs.yar
-
loki/signature-base/yara/crime_atm_javadipcash.yar
-
loki/signature-base/yara/crime_atm_loup.yar
-
loki/signature-base/yara/crime_atm_xfsadm.yar
-
loki/signature-base/yara/crime_atm_xfscashncr.yar
-
loki/signature-base/yara/crime_bad_patch.yar
-
loki/signature-base/yara/crime_badrabbit.yar
-
loki/signature-base/yara/crime_bazarbackdoor.yar
-
loki/signature-base/yara/crime_bernhard_pos.yar
-
loki/signature-base/yara/crime_bluenoroff_pos.yar
-
loki/signature-base/yara/crime_buzus_softpulse.yar
-
loki/signature-base/yara/crime_cmstar.yar
-
loki/signature-base/yara/crime_cn_campaign_njrat.yar
-
loki/signature-base/yara/crime_cn_group_btc.yar
-
loki/signature-base/yara/crime_cobalt_gang_pdf.yar
-
loki/signature-base/yara/crime_cobaltgang.yar
-
loki/signature-base/yara/crime_corkow_dll.yar
-
loki/signature-base/yara/crime_covid_ransom.yar
-
loki/signature-base/yara/crime_credstealer_generic.yar
-
loki/signature-base/yara/crime_crypto_miner.yar
-
loki/signature-base/yara/crime_cryptowall_svg.yar
-
loki/signature-base/yara/crime_dearcry_ransom.yar
-
loki/signature-base/yara/crime_dexter_trojan.yar
-
loki/signature-base/yara/crime_dridex_xml.yar
-
loki/signature-base/yara/crime_emotet.yar
-
loki/signature-base/yara/crime_enfal.yar
-
loki/signature-base/yara/crime_envrial.yar
-
loki/signature-base/yara/crime_eternalrocks.yar
-
loki/signature-base/yara/crime_evilcorp_dridex_banker.yar
-
loki/signature-base/yara/crime_fareit.yar
-
loki/signature-base/yara/crime_fireball.yar
-
loki/signature-base/yara/crime_floxif_flystudio.yar
-
loki/signature-base/yara/crime_gamaredon.yar
-
loki/signature-base/yara/crime_goldeneye.yar
-
loki/signature-base/yara/crime_gozi_crypter.yar
-
loki/signature-base/yara/crime_guloader.yar
-
loki/signature-base/yara/crime_h2miner_kinsing.yar
-
loki/signature-base/yara/crime_hermes_ransom.yar
-
loki/signature-base/yara/crime_icedid.yar
-
loki/signature-base/yara/crime_kasper_oct17.yar
-
loki/signature-base/yara/crime_kins_dropper.yar
-
loki/signature-base/yara/crime_kr_malware.yar
-
loki/signature-base/yara/crime_kraken_bot1.yar
-
loki/signature-base/yara/crime_kriskynote.yar
-
loki/signature-base/yara/crime_locky.yar
-
loki/signature-base/yara/crime_loki_bot.yar
-
loki/signature-base/yara/crime_mal_grandcrab.yar
-
loki/signature-base/yara/crime_mal_nitol.yar
-
loki/signature-base/yara/crime_mal_ransom_wadharma.yar
-
loki/signature-base/yara/crime_malumpos.yar
-
loki/signature-base/yara/crime_malware_generic.yar
-
loki/signature-base/yara/crime_malware_set_oct16.yar
-
loki/signature-base/yara/crime_maze_ransomware.yar
-
loki/signature-base/yara/crime_mikey_trojan.yar
-
loki/signature-base/yara/crime_mirai.yar
-
loki/signature-base/yara/crime_mywscript_dropper.yar
-
loki/signature-base/yara/crime_nansh0u.yar
-
loki/signature-base/yara/crime_nkminer.yar
-
loki/signature-base/yara/crime_nopetya_jun17.yar
-
loki/signature-base/yara/crime_ole_loadswf_cve_2018_4878.yar
-
loki/signature-base/yara/crime_parallax_rat.yar
-
loki/signature-base/yara/crime_phish_gina_dec15.yar
-
loki/signature-base/yara/crime_ransom_conti.yar
-
loki/signature-base/yara/crime_ransom_darkside.yar
-
loki/signature-base/yara/crime_ransom_generic.yar
-
loki/signature-base/yara/crime_ransom_germanwiper.yar
-
loki/signature-base/yara/crime_ransom_lockergoga.yar
-
loki/signature-base/yara/crime_ransom_prolock.yar
-
loki/signature-base/yara/crime_ransom_ragna_locker.yar
-
loki/signature-base/yara/crime_ransom_revil.yar
-
loki/signature-base/yara/crime_ransom_robinhood.yar
-
loki/signature-base/yara/crime_ransom_stealbit_lockbit.yar
-
loki/signature-base/yara/crime_ransom_venus.yar
-
loki/signature-base/yara/crime_rat_parallax.yar
-
loki/signature-base/yara/crime_revil_general.yar
-
loki/signature-base/yara/crime_rombertik_carbongrabber.yar
-
loki/signature-base/yara/crime_ryuk_ransomware.yar
-
loki/signature-base/yara/crime_shifu_trojan.yar
-
loki/signature-base/yara/crime_snarasite.yar
-
loki/signature-base/yara/crime_socgholish.yar
-
loki/signature-base/yara/crime_stealer_exfil_zip.yar
-
loki/signature-base/yara/crime_teledoor.yar
-
loki/signature-base/yara/crime_trickbot.yar
-
loki/signature-base/yara/crime_upatre_oct15.yar
-
loki/signature-base/yara/crime_wannacry.yar
-
loki/signature-base/yara/crime_wsh_rat.yar
-
loki/signature-base/yara/crime_xbash.yar
-
loki/signature-base/yara/crime_zeus_panda.yar
-
loki/signature-base/yara/crime_zloader_maldocs.yar
-
loki/signature-base/yara/expl_adselfservice_cve_2021_40539.yar
-
loki/signature-base/yara/expl_citrix_netscaler_adc_exploitation_cve_2023_3519.yar
-
loki/signature-base/yara/expl_cve_2021_1647.yar
-
loki/signature-base/yara/expl_cve_2021_26084_confluence_log.yar
-
loki/signature-base/yara/expl_cve_2021_40444.yar
-
loki/signature-base/yara/expl_cve_2022_41040_proxynoshell.yar
-
loki/signature-base/yara/expl_cve_2022_46169_cacti.yar
-
loki/signature-base/yara/expl_ivanti_epmm_mobileiron_cve_2023_35078.yar
-
loki/signature-base/yara/expl_keepass_cve_2023_24055.yar
-
loki/signature-base/yara/expl_libssh_cve_2023_2283_jun23.yar
-
loki/signature-base/yara/expl_log4j_cve_2021_44228.yar
-
loki/signature-base/yara/expl_macos_switcharoo_dec22.yar
-
loki/signature-base/yara/expl_manageengine_jan23.yar
-
loki/signature-base/yara/expl_outlook_cve_2023_23397.yar
-
loki/signature-base/yara/expl_proxynotshell_owassrf_dec22.yar
-
loki/signature-base/yara/expl_proxyshell.yar
-
loki/signature-base/yara/expl_spring4shell.yar
-
loki/signature-base/yara/exploit_cve_2014_4076.yar
-
loki/signature-base/yara/exploit_cve_2015_1674.yar
-
loki/signature-base/yara/exploit_cve_2015_1701.yar
-
loki/signature-base/yara/exploit_cve_2015_2426.yar
-
loki/signature-base/yara/exploit_cve_2015_2545.yar
-
loki/signature-base/yara/exploit_cve_2015_5119.yar
-
loki/signature-base/yara/exploit_cve_2017_11882.yar
-
loki/signature-base/yara/exploit_cve_2017_8759.yar
-
loki/signature-base/yara/exploit_cve_2017_9800.yar
-
loki/signature-base/yara/exploit_cve_2018_0802.yar
-
loki/signature-base/yara/exploit_cve_2018_16858.yar
-
loki/signature-base/yara/exploit_cve_2021_31166.yar
-
loki/signature-base/yara/exploit_cve_2021_33766_proxytoken.yar
-
loki/signature-base/yara/exploit_cve_2022_22954_vmware_workspace_one.yar
-
loki/signature-base/yara/exploit_cve_2023_38146.yar
-
loki/signature-base/yara/exploit_f5_bigip_cve_2021_22986_log.yar
-
loki/signature-base/yara/exploit_gitlab_cve_2021_22205.yar
-
loki/signature-base/yara/exploit_rtf_ole2link.yar
-
loki/signature-base/yara/exploit_shitrix.yar
-
loki/signature-base/yara/exploit_tlb_scripts.yar
-
loki/signature-base/yara/exploit_uac_elevators.yar
-
loki/signature-base/yara/gen_100days_of_yara_2023.yar
-
loki/signature-base/yara/gen_Excel4Macro_Sharpshooter.yar
-
loki/signature-base/yara/gen_ace_with_exe.yar
-
loki/signature-base/yara/gen_anomalies_keyword_combos.yar
-
loki/signature-base/yara/gen_armitage.yar
-
loki/signature-base/yara/gen_autocad_lsp_malware.yar
-
loki/signature-base/yara/gen_b374k_extra.yar
-
loki/signature-base/yara/gen_bad_pdf.yar
-
loki/signature-base/yara/gen_case_anomalies.yar
-
loki/signature-base/yara/gen_cert_payloads.yar
-
loki/signature-base/yara/gen_chaos_payload.yar
-
loki/signature-base/yara/gen_cmd_script_obfuscated.yar
-
loki/signature-base/yara/gen_cn_hacktool_scripts.yar
-
loki/signature-base/yara/gen_cn_hacktools.yar
-
loki/signature-base/yara/gen_cn_webshells.yar
-
loki/signature-base/yara/gen_cobaltstrike.yar
-
loki/signature-base/yara/gen_cobaltstrike_by_avast.yar
-
loki/signature-base/yara/gen_crime_bitpaymer.yar
-
loki/signature-base/yara/gen_crimson_rat.yar
-
loki/signature-base/yara/gen_crunchrat.yar
-
loki/signature-base/yara/gen_dde_in_office_docs.yar
-
loki/signature-base/yara/gen_deviceguard_evasion.yar
-
loki/signature-base/yara/gen_doc_follina.yar
-
loki/signature-base/yara/gen_dropper_pdb.yar
-
loki/signature-base/yara/gen_elf_file_anomalies.yar
-
loki/signature-base/yara/gen_empire.yar
-
loki/signature-base/yara/gen_enigma_protector.yar
-
loki/signature-base/yara/gen_event_mute_hook.yar
-
loki/signature-base/yara/gen_excel_auto_open_evasion.yar
-
loki/signature-base/yara/gen_excel_xll_addin_suspicious.yar
-
loki/signature-base/yara/gen_excel_xor_obfuscation_velvetsweatshop.yar
-
loki/signature-base/yara/gen_exploit_cve_2017_10271_weblogic.yar
-
loki/signature-base/yara/gen_fake_amsi_dll.yar
-
loki/signature-base/yara/gen_faked_versions.yar
-
loki/signature-base/yara/gen_file_anomalies.yar
-
loki/signature-base/yara/gen_fireeye_redteam_tools.yar
-
loki/signature-base/yara/gen_floxif.yar
-
loki/signature-base/yara/gen_frp_proxy.yar
-
loki/signature-base/yara/gen_gcti_cobaltstrike.yar
-
loki/signature-base/yara/gen_gcti_sliver.yar
-
loki/signature-base/yara/gen_gen_cactustorch.yar
-
loki/signature-base/yara/gen_github_net_redteam_tools_guids.yar
-
loki/signature-base/yara/gen_github_net_redteam_tools_names.yar
-
loki/signature-base/yara/gen_github_repo_compromise_myjino_ru.yar
-
loki/signature-base/yara/gen_gobfuscate.yar
-
loki/signature-base/yara/gen_google_anomaly.yar
-
loki/signature-base/yara/gen_gpp_cpassword.yar
-
loki/signature-base/yara/gen_hawkeye.yar
-
loki/signature-base/yara/gen_hktl_koh_tokenstealer.yar
-
loki/signature-base/yara/gen_hktl_roothelper.yar
-
loki/signature-base/yara/gen_hktl_venom_lib.yar
-
loki/signature-base/yara/gen_hta_anomalies.yar
-
loki/signature-base/yara/gen_hunting_susp_rar.yar
-
loki/signature-base/yara/gen_icon_anomalies.yar
-
loki/signature-base/yara/gen_impacket_tools.yar
-
loki/signature-base/yara/gen_imphash_detection.yar
-
loki/signature-base/yara/gen_invoke_mimikatz.yar
-
loki/signature-base/yara/gen_invoke_psimage.yar
-
loki/signature-base/yara/gen_invoke_thehash.yar
-
loki/signature-base/yara/gen_javascript_powershell.yar
-
loki/signature-base/yara/gen_kerberoast.yar
-
loki/signature-base/yara/gen_khepri.yar
-
loki/signature-base/yara/gen_kirbi_mimkatz.yar
-
loki/signature-base/yara/gen_lnx_malware_indicators.yar
-
loki/signature-base/yara/gen_loaders.yar
-
loki/signature-base/yara/gen_macro_ShellExecute_action.yar
-
loki/signature-base/yara/gen_macro_builders.yar
-
loki/signature-base/yara/gen_macro_staroffice_suspicious.yar
-
loki/signature-base/yara/gen_mal_3cx_compromise_mar23.yar
-
loki/signature-base/yara/gen_mal_backnet.yar
-
loki/signature-base/yara/gen_mal_link.yar
-
loki/signature-base/yara/gen_mal_scripts.yar
-
loki/signature-base/yara/gen_maldoc.yar
-
loki/signature-base/yara/gen_malware_MacOS_plist_suspicious.yar
-
loki/signature-base/yara/gen_malware_set_qa.yar
-
loki/signature-base/yara/gen_merlin_agent.yar
-
loki/signature-base/yara/gen_metasploit_loader_rsmudge.yar
-
loki/signature-base/yara/gen_metasploit_payloads.yar
-
loki/signature-base/yara/gen_mimikatz.yar
-
loki/signature-base/yara/gen_mimikittenz.yar
-
loki/signature-base/yara/gen_mimipenguin.yar
-
loki/signature-base/yara/gen_net_xorstrings.yar
-
loki/signature-base/yara/gen_nighthawk_c2.yar
-
loki/signature-base/yara/gen_nimpackt.yar
-
loki/signature-base/yara/gen_nopowershell.yar
-
loki/signature-base/yara/gen_nvidia_leaked_cert.yar
-
loki/signature-base/yara/gen_onenote_phish.yar
-
loki/signature-base/yara/gen_osx_backdoor_bella.yar
-
loki/signature-base/yara/gen_osx_evilosx.yar
-
loki/signature-base/yara/gen_osx_pyagent_persistence.yar
-
loki/signature-base/yara/gen_p0wnshell.yar
-
loki/signature-base/yara/gen_phish_attachments.yar
-
loki/signature-base/yara/gen_pirpi.yar
-
loki/signature-base/yara/gen_powerkatz.yar
-
loki/signature-base/yara/gen_powershdll.yar
-
loki/signature-base/yara/gen_powershell_empire.yar
-
loki/signature-base/yara/gen_powershell_invocation.yar
-
loki/signature-base/yara/gen_powershell_obfuscation.yar
-
loki/signature-base/yara/gen_powershell_suite.yar
-
loki/signature-base/yara/gen_powershell_susp.yar
-
loki/signature-base/yara/gen_powershell_toolkit.yar
-
loki/signature-base/yara/gen_powersploit_dropper.yar
-
loki/signature-base/yara/gen_ps1_shellcode.yar
-
loki/signature-base/yara/gen_ps_empire_eval.yar
-
loki/signature-base/yara/gen_ps_osiris.yar
-
loki/signature-base/yara/gen_pua.yar
-
loki/signature-base/yara/gen_pupy_rat.yar
-
loki/signature-base/yara/gen_python_encoded_adware.yar
-
loki/signature-base/yara/gen_python_pty_shell.yar
-
loki/signature-base/yara/gen_python_pyminifier_encoded_payload.yar
-
loki/signature-base/yara/gen_python_reverse_shell.yara
-
loki/signature-base/yara/gen_qakbot_uninstaller.yar
-
loki/signature-base/yara/gen_rar_exfil.yar
-
loki/signature-base/yara/gen_rats_malwareconfig.yar
-
loki/signature-base/yara/gen_recon_indicators.yar
-
loki/signature-base/yara/gen_redmimicry.yar
-
loki/signature-base/yara/gen_redsails.yar
-
loki/signature-base/yara/gen_regsrv32_issue.yar
-
loki/signature-base/yara/gen_remote_potato0.yar
-
loki/signature-base/yara/gen_rottenpotato.yar
-
loki/signature-base/yara/gen_rtf_malver_objects.yar
-
loki/signature-base/yara/gen_sfx_with_microsoft_copyright.yar
-
loki/signature-base/yara/gen_sharpcat.yar
-
loki/signature-base/yara/gen_shikataganai.yar
-
loki/signature-base/yara/gen_sign_anomalies.yar
-
loki/signature-base/yara/gen_solarwinds_credential_stealer.yar
-
loki/signature-base/yara/gen_susp_bat2exe.yar
-
loki/signature-base/yara/gen_susp_bat_aux.yar
-
loki/signature-base/yara/gen_susp_cmd_var_expansion.yar
-
loki/signature-base/yara/gen_susp_hacktool.yar
-
loki/signature-base/yara/gen_susp_indicators.yar
-
loki/signature-base/yara/gen_susp_js_obfuscatorio.yar
-
loki/signature-base/yara/gen_susp_lnk.yar
-
loki/signature-base/yara/gen_susp_lnk_files.yar
-
loki/signature-base/yara/gen_susp_net_msil.yar
-
loki/signature-base/yara/gen_susp_obfuscation.yar
-
loki/signature-base/yara/gen_susp_office_dropper.yar
-
loki/signature-base/yara/gen_susp_ps_jab.yar
-
loki/signature-base/yara/gen_susp_sfx.yar
-
loki/signature-base/yara/gen_susp_strings_in_ole.yar
-
loki/signature-base/yara/gen_susp_wer_files.yar
-
loki/signature-base/yara/gen_susp_xor.yar
-
loki/signature-base/yara/gen_suspicious_InPage_dropper.yar
-
loki/signature-base/yara/gen_suspicious_strings.yar
-
loki/signature-base/yara/gen_sysinternals_anomaly.yar
-
loki/signature-base/yara/gen_tempracer.yar
-
loki/signature-base/yara/gen_thumbs_cloaking.yar
-
loki/signature-base/yara/gen_transformed_strings.yar
-
loki/signature-base/yara/gen_tscookie_rat.yar
-
loki/signature-base/yara/gen_unicorn_obfuscated_powershell.yar
-
loki/signature-base/yara/gen_unspecified_malware.yar
-
loki/signature-base/yara/gen_url_persitence.yar
-
loki/signature-base/yara/gen_url_to_local_exe.yar
-
loki/signature-base/yara/gen_vcruntime140_dll_sideloading.yar
-
loki/signature-base/yara/gen_vhd_anomaly.yar
-
loki/signature-base/yara/gen_webshell_csharp.yar
-
loki/signature-base/yara/gen_webshells.yar
-
loki/signature-base/yara/gen_webshells_ext_vars.yar
-
loki/signature-base/yara/gen_win_privesc.yar
-
loki/signature-base/yara/gen_winpayloads.yar
-
loki/signature-base/yara/gen_winshells.yar
-
loki/signature-base/yara/gen_wmi_implant.yar
-
loki/signature-base/yara/gen_xor_hunting.yar
-
loki/signature-base/yara/gen_xored_pe.yar
-
loki/signature-base/yara/gen_xtreme_rat.yar
-
loki/signature-base/yara/gen_ysoserial_payloads.yar
-
loki/signature-base/yara/gen_zoho_rcef_logs.yar
-
loki/signature-base/yara/general_cloaking.yar
-
loki/signature-base/yara/general_officemacros.yar
-
loki/signature-base/yara/generic_anomalies.yar
-
loki/signature-base/yara/generic_cryptors.yar
-
loki/signature-base/yara/generic_dumps.yar
-
loki/signature-base/yara/generic_exe2hex_payload.yar
-
loki/signature-base/yara/hktl_bruteratel_c4.yar
-
loki/signature-base/yara/hktl_bruteratel_c4_badger.yar
-
loki/signature-base/yara/hktl_natbypass.yar
-
loki/signature-base/yara/log_teamviewer_keyboard_layouts.yar
-
loki/signature-base/yara/mal_avemaria_rat.yar
-
loki/signature-base/yara/mal_codecov_hack.yar
-
loki/signature-base/yara/mal_crime_unknown.yar
-
loki/signature-base/yara/mal_cryp_rat.yar
-
loki/signature-base/yara/mal_ducktail_compromised_certs_jun23.yar
-
loki/signature-base/yara/mal_efile_apr23.yar
-
loki/signature-base/yara/mal_lnx_barracuda_cve_2023_2868.yar
-
loki/signature-base/yara/mal_lnx_implant_may22.yar
-
loki/signature-base/yara/mal_lockbit_lnx_macos_apr23.yar
-
loki/signature-base/yara/mal_netsha.yar
-
loki/signature-base/yara/mal_passwordstate_backdoor.yar
-
loki/signature-base/yara/mal_qbot_feb23.yar
-
loki/signature-base/yara/mal_qbot_payloads.yar
-
loki/signature-base/yara/mal_ransom_esxi_attacks_feb23.yar
-
loki/signature-base/yara/mal_ransom_lorenz.yar
-
loki/signature-base/yara/mal_ru_sparepart_dec22.yar
-
loki/signature-base/yara/pua_cryptocoin_miner.yar
-
loki/signature-base/yara/pua_xmrig_monero_miner.yar
-
loki/signature-base/yara/pup_lightftp.yar
-
loki/signature-base/yara/spy_equation_fiveeyes.yar
-
loki/signature-base/yara/spy_querty_fiveeyes.yar
-
loki/signature-base/yara/spy_regin_fiveeyes.yar
-
loki/signature-base/yara/susp_vulndriver_hp_hardware_diagnostics_etdsupp_may23.yar
-
loki/signature-base/yara/thor-hacktools.yar
-
loki/signature-base/yara/thor-webshells.yar
-
loki/signature-base/yara/thor_inverse_matches.yar
-
loki/signature-base/yara/threat_lenovo_superfish.yar
-
loki/signature-base/yara/vul_backdoor_antitheftweb.yar
-
loki/signature-base/yara/vul_confluence_questions_plugin_cve_2022_26138.yar
-
loki/signature-base/yara/vul_cve_2020_0688.yar
-
loki/signature-base/yara/vul_cve_2020_1938.yar
-
loki/signature-base/yara/vul_cve_2021_3438_printdriver.yar
-
loki/signature-base/yara/vul_cve_2021_386471_omi.yar
-
loki/signature-base/yara/vul_dell_bios_upd_driver.yar
-
loki/signature-base/yara/vul_drivecrypt.yar
-
loki/signature-base/yara/vul_jquery_fileupload_cve_2018_9206.yar
-
loki/signature-base/yara/vul_php_zlib_backdoor.yar
-
loki/signature-base/yara/vuln_gigabyte_driver.yar
-
loki/signature-base/yara/vuln_keepass_brute_forcible.yar
-
loki/signature-base/yara/vuln_moveit_0day_jun23.yar
-
loki/signature-base/yara/vuln_proxynotshell_cve_2022_41040.yar
-
loki/signature-base/yara/webshell_regeorg.yar
-
loki/signature-base/yara/webshell_xsl_transform.yar
-
loki/signature-base/yara/yara-rules_mal_drivers.yar
-
loki/signature-base/yara/yara-rules_vuln_drivers_strict.yar
-
loki/signature-base/yara/yara-rules_vuln_drivers_strict_renamed.yar
-
loki/signature-base/yara/yara_mixed_ext_vars.yar
-
loki/tools/pe-sieve32.exe
766b6eccab60bdfd3033c349c59eb22c
Headers
Imports
Sections
-
loki/tools/pe-sieve64.exe
a911b3ba82adfa60485a3ebb9ec105d9
Headers
Imports
Sections