Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	WannCry_BAT	—	—
yara	WannCry_m_vbs	—	—
yara	WannaCry_Ransomware_Gen	—	—
yara	DarkComet_Keylogger_File	—	—
yara	WannaCry_Ransomware	—	—
yara	Wanna_Cry_Ransomware_Generic	—	—
yara	ransom_telefonica	—	—
yara	NHS_Strain_Wanna	—	—
yara	Wanna_Sample_4da1f312a214c07143abeeafb695d904	—	—
yara	Wanna_Sample_84c82835a5d21bbcf75a61706d8ab549	—	—
yara	WannaDecryptor	—	—
yara	MS17_010_WanaCry_worm	—	—
yara	Locky_Ransomware_2	—	—
yara	Locky_Ransomware	—	—
yara	GoldenEyeRansomware_Dropper_MalformedZoomit	—	—
yara	GoldenEye_Ransomware_XLS	—	—
yara	crime_ransomware_windows_GPGQwerty	—	—
yara	Erebus	—	—
yara	DoublePulsarDllInjection_Petya	—	—
yara	DoublePulsarXor_Petya	—	—
yara	DMALocker4	—	—
yara	DMALocker	—	—
yara	BackdoorFCKG	—	—
yara	SVG_LoadURL	—	—
yara	CryptoLocker_rule2	—	—
yara	CryptoLocker_set1	—	—
yara	cryptonar_ransomware	—	—
yara	Ransom	—	—
yara	ransom_comodosec_mrcr1	—	—
yara	cerber5	—	—
yara	cerber4	—	—
yara	cerber3	—	—
yara	sig_8ebc97e05c8e1073bda2efb6f4d00ad7e789260afa2c276f0c72740b838a0a93	—	—
yara	Ransom_Alfa	—	—
yara	Ransom_Alpha	—	—
yara	legion_777	—	—
yara	Ransom_CryptXXX_Real	—	—
yara	Ransom_CryptXXX_Dropper	—	—
yara	Mozart	—	—
yara	PoS_Malware_MalumPOS	—	—