Blacklisted noisy/FP prone YARA rules

pyllyukko · Dec 24, 2023 · 62d5504 · 62d5504 · pyllyukko · Jan 11, 2024
1 parent 5eaae18
commit 62d5504
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/tasks/clamav.yml b/tasks/clamav.yml
@@ -280,6 +280,25 @@
           shellshock_generic
           memory_shylock
           CrowdStrike_CVE_2014_4113
+          PlugX
+          misc_php_exploits
+          CryptoLocker_set1
+          silent_banker
+          Trojan
+          BLOWFISH_Constants
+          misc_hexascii_pe_in_html
+          embedded_pe
+          SHA512_Constants
+          dbgdetect_procs
+          wannacry_1
+          MachO_File_pyinstaller
+          SHA256_Constants
+          redkit_bin_basic
+          Hacktool_Strings_p0wnedShell
+          TrojanDownloaderCbeplaySample
+          mime_mso
+          CrowdStrike_CVE_2014_4113
+          WHIRLPOOL_Constants
       tags:
         - configuration
         - yara