https://bitsofbinary.github.io/yara/2023/01/01/100daysofyara.html
Threat Intel · Global Cyber Threat Intelligence ·
100 Days of YARA – 2023
https://bitsofbinary.github.io/yara/2023/01/01/100daysofyara.html
#yara
Domains (9)
ci[.]appveyor[.]comcommunity[.]spiceworks[.]comexport[.]nameinteroperability[.]blob[.]core[.]windows[.]netosandamalith[.]comredmaple[.]techsection[.]namewww[.]garykessler[.]netwww[.]tarlogic[.]com
URLs (7)
hxxps://ci[.]appveyor[.]com/project/plusvic/yara/build/job/wthlb30bklmlns0a/artifactshxxps://community[.]spiceworks[.]com/topic/2107142-what-are-all-of-the-file-types-on-a-windows-pc-that-contain-executable-codehxxps://interoperability[.]blob[.]core[.]windows[.]net/files/MS-ONE/%5bMS-ONE%5d[.]pdfhxxps://osandamalith[.]com/2020/07/19/exploring-the-ms-dos-stub/hxxps://redmaple[.]tech/blogs/macho-files/hxxps://www[.]garykessler[.]net/library/file_sigs[.]htmlhxxps://www[.]tarlogic[.]com/blog/seloaddriverprivilege-privilege-escalation/
md5 (6)
sha256 (12)
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
Bitcoin Addresses (1)
Auto-extracted from this report. Indicators shown are defanged for safe viewing. The downloads contain live values plus a YARA rule for tooling. Verify before acting.
Need this turned into detection or defense for your environment? Work with us →