🧰 YARA rules

The items that name it 6

• pgj11: Analysis of Bincrypter and gsocket (gs-netcat)
  writeup2026-08-31

  Released rules for detecting bincrypter-packed gsocket / gs-netcat implants

• Awesome Malware Analysis
  repo2026-07-31

  Yara rules repository

• Miasma & Hades Worms
  writeup2026-06-10

  Static detection technique noted as still effective against the malware despite anti-analysis tricks

• mthcht/awesome-lists
  repo2026-06-10It is written here as Yara rules (Threat Hunting).

  Yara rules for threat hunting

• Dissecting CrashFix: KongTuke's New Toy
  writeup2026-01-16It is written here as YARA rules (GitHub - RussianPanda95/Yara-Rules).

  Detection rules published for GateKeeper Payload, MintsLoader, and ModeloRAT, linked in the indicators of compromise/detection section.

• ESXi Exploitation in the Wild
  writeup2026-01-07It is written here as Yara rules (RussianPanda95/Yara-Rules).

  Detection rules for win_mal_GetShellPlugin, win_mal_MAESTRO, linux_mal_VSOCKpuppet, win_mal_MyDriverSYS