Submit an indicator to check against 70+ antivirus engines.
Recent security findings and community activity from the global intelligence network.
YARA Signature Match - THOR APT Scanner
RULE: SUSP_Base64AtEndOfFile_Jul21
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_Base64AtEndOfFile_Jul21
DESCRIPTION: Detects Base64 Blob at the end of a Executable. Often used as dropper paylo...
YARA Signature Match - THOR APT Scanner
RULE: SUSP_PowerShell_Disable_MicrosoftDefender_Features_Jan22_1
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_PowerShell_Disable_MicrosoftDefender_Features_Jan22_1
DESCRIPTION: Detects command...
YARA Signature Match - THOR APT Scanner
RULE: SUSP_EtwEventWrite_Import_Aug21_1
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_EtwEventWrite_Import_Aug21_1
DESCRIPTION: Detects suspicious executables that import EtwEventWrite and shar...
YARA Signature Match - THOR APT Scanner
RULE: SUSP_OBFUSC_Base64_Hex_Encoded_Apr19
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_OBFUSC_Base64_Hex_Encoded_Apr19
DESCRIPTION: Detects hex encoded code that has been base64 encoded
RULE_...
YARA Signature Match - THOR APT Scanner
RULE: SUSP_PowerShell_Disable_MicrosoftDefender_Features_Jan22_1
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_PowerShell_Disable_MicrosoftDefender_Features_Jan22_1
DESCRIPTION: Detects command...
YARA Signature Match - THOR APT Scanner
RULE: SUSP_Base64AtEndOfFile_Jul21
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_Base64AtEndOfFile_Jul21
DESCRIPTION: Detects Base64 Blob at the end of a Executable. Often used as dropper paylo...
YARA Signature Match - THOR APT Scanner
RULE: SUSP_Malformed_PE_Header_Dec17
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_Malformed_PE_Header_Dec17
DESCRIPTION: Detects suspicious file with malformed MZ PE header
RULE_AUTHOR: Floria...
#malware #vidar
[b]VT Collection:[/b] https://www.virustotal.com/gui/collection/27b4b899024b795028e7af307fa58eaaed744b4f97d5e964683804d9b1e4884f
[b]Reported in:[/b]
Hatching Triage: https://tria.ge/260702-ng9klsgy9z
FileScan.IO: https://www.filescan.io/reports/6a09179e84ef7f52aeb81c9e6a8b774805447d5...
YARA Signature Match - THOR APT Scanner
RULE: SUSP_Monero_Mining_Pools_Oct21
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_Monero_Mining_Pools_Oct21
DESCRIPTION: Detects FQDNs of popular crypto mining pools in files
REFERENCE: https:...
YARA Signature Match - THOR APT Scanner
RULE: Reversed_String_TypicalMalware
RULE_TYPE: VALHALLA rule feed only âš¡
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/Reversed_String_TypicalMalware
DESCRIPTION: Detects reversed strings often used in Malware
REFERENCE: https://www.netscout.co...