Weekly Detection Rule (YARA and Snort) Information – Week 1, January 2025

Weekly Detection Rule (YARA and Snort) Information – Week 1, January 2025

The following is the information on Yara and Snort rules (week 1, January 2025) collected and shared by the AhnLab TIP service.

  • 0 YARA Rules
  • 5 Snort Rules

Detection name

Source

ET TROJAN Observed ClickFix Powershell Delivery Page Inbound https://rules.emergingthreatspro.com/open/
ET TROJAN Win32/Unk.Coinminer Checkin https://rules.emergingthreatspro.com/open/
ET TROJAN W32/BitCoinMiner.MultiThreat Getblocktemplate Protocol Server Coinbasetxn Begin Mining Response https://rules.emergingthreatspro.com/open/
ET TROJAN W32/BitCoinMiner.MultiThreat Stratum Protocol Mining.Notify Initial Connection Server Response https://rules.emergingthreatspro.com/open/
ET TROJAN PrimeCoinMiner.Protominer https://rules.emergingthreatspro.com/open/

2025-01_ASEC_Notes_1_snort.rules