https://bitsofbinary.github.io/yara/2023/01/01/100daysofyara.html
Threat Intel·Global Cyber Threat Intelligence··ByBulwark Kilo
100 Days of YARA – 2023
https://bitsofbinary.github.io/yara/2023/01/01/100daysofyara.html
#yara
Extracted Observables
34 observables, auto-extracted and defanged.
Domains (7)
ci[.]appveyor[.]comcommunity[.]spiceworks[.]cominteroperability[.]blob[.]core[.]windows[.]netosandamalith[.]comredmaple[.]techwww[.]garykessler[.]netwww[.]tarlogic[.]com
URLs (7)
hxxps://ci[.]appveyor[.]com/project/plusvic/yara/build/job/wthlb30bklmlns0a/artifactshxxps://community[.]spiceworks[.]com/topic/2107142-what-are-all-of-the-file-types-on-a-windows-pc-that-contain-executable-codehxxps://interoperability[.]blob[.]core[.]windows[.]net/files/MS-ONE/%5bMS-ONE%5d[.]pdfhxxps://osandamalith[.]com/2020/07/19/exploring-the-ms-dos-stub/hxxps://redmaple[.]tech/blogs/macho-files/hxxps://www[.]garykessler[.]net/library/file_sigs[.]htmlhxxps://www[.]tarlogic[.]com/blog/seloaddriverprivilege-privilege-escalation/
md5 (6)
269af2751efee65b1ab00622816c83e630851d4a2b31e9699084a06e765e21b04f6b9c644d4fe517889b3fbb0b4271ca72f60d7f4ce22db4506547ad555ea0b1c0de41e45352714500771d43f0d8c4c3f34d5f2d4577ed6d9ceec516c1f5a744
sha1 (2)
05ef26965be930fade49e5dcba73b9fefc04757e2b631d0ee47650923955398921c1ceccc3e38cb1
sha256 (12)
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
These observational values were auto-extracted from this report and are not a blocklist or a maliciousness verdict. Values shown are defanged for safe viewing; downloads contain live values. Source-authored YARA was identified but could not be captured as a complete usable package. No generated substitute is provided; consult the original report.