YARA Signature Match - THOR APT Scanner

RULE: HKTL_Defeat_Defender_Apr21_1
RULE_TYPE: VALHALLA rule feed only ⚡
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/HKTL_Defeat_Defender_Apr21_1
DESCRIPTION: Detects all kinds of scripts that disable many important Windows Defender features
RE...

YARA Signature Match - THOR APT Scanner

RULE: Sofacy_Jan18_1_PE_Info_Anomaly
RULE_TYPE: VALHALLA rule feed only ⚡
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/Sofacy_Jan18_1_PE_Info_Anomaly
DESCRIPTION: Detects a PE header anomaly as found in malware from Sofacy campaign in January 2...

YARA Signature Match - THOR APT Scanner

RULE: SUSP_HKTL_OpCode_May21_1
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_HKTL_OpCode_May21_1
DESCRIPTION: Detects code sequences found in malicious samples - mostly used for AMSI / ASB bypa...

[b]Original filename (SHA256)[/b] : bdd1ac8428211967ac5fd230590c46beb3659d3204bee38a8ef1659d886176fb

Comment added on 2026-10-04 11:39:58 French Time Zone

[b]MWDB Link[/b] : https://mwdb.cert.pl/file/bdd1ac8428211967ac5fd230590c46beb3659d3204bee38a8ef1659d886176fb
[b]VirusShare Link[/b] : https://...

Automated report: this IP generated 1 event(s) consistent with unauthorized access attempts against a web application, blocked by perimeter WAF/NGFW controls.

Details: Activity window: 2026-10-04. Source network: IN, AS8075, Microsoft Corporation. MITRE ATT&CK: T1190 Exploit Public-Facing Applicati...

Phishing...

**File Info:**

**Filename:**
2026-10-03_741318ae76aae4bc815a60152b8fbb0f_amadey_darkgate_elex_luca-stealer_lynx_njrat

**Threat Score:**
10/10

**Family:**
N/A

**File Report:**
https://jaffacakes118.dev/analysis/34f2e9654cf8678063c958f1ba28e99f3b320a80e3eb54e6728421f2e810106d
https://tria.ge/26100...

YARA Signature Match - THOR APT Scanner

RULE: SUSP_Base64_Encoded_Hex_Encoded_Code
RULE_TYPE: Community 👥
RULE_LINK: https://github.com/Neo23x0/signature-base/search?q=SUSP_Base64_Encoded_Hex_Encoded_Code
DESCRIPTION: Detects hex encoded code that has been base64 encoded
REFERENCE: https://www.n...

YARA Signature Match - THOR APT Scanner

RULE: Destructive_Ransomware_Gen1
RULE_TYPE: Community 👥
RULE_LINK: https://github.com/Neo23x0/signature-base/search?q=Destructive_Ransomware_Gen1
DESCRIPTION: Detects destructive malware
REFERENCE: http://blog.talosintelligence.com/2018/02/olympic-destroy...

[b]Original filename (SHA256)[/b] : 729510144d5364b14079ebed9fcc6b116af0311714e88e22f8a5afdad1118dce

Comment added on 2026-10-04 11:39:49 French Time Zone

[b]MWDB Link[/b] : https://mwdb.cert.pl/file/729510144d5364b14079ebed9fcc6b116af0311714e88e22f8a5afdad1118dce
[b]VirusShare Link[/b] : https://...