Family rules on Malpedia
Lumma Stealer profileMalpedia lists YARA rules for the family in its Lumma Stealer entry, together with its report index. Malpedia (Fraunhofer FKIE)
Rules written to identify and classify malware samples using textual and byte patterns.
YARA is a tool that lets researchers identify malware families with descriptions based on textual or binary patterns. Each rule consists of a set of patterns and logic that states under which condition they match. VirusTotal
Rules can be run on files, memory dumps and downloaded samples; they focus on shared fragments to catch different builds of the same family. YARA documentation
YARA is open source and developed by VirusTotal; many security products and analysis platforms read the same rule format. GitHub
Text and byte fragments of the family that remain in every build. YARA documentation
How many patterns must match, and where. YARA documentation
Clean files are checked for false matches. YARA documentation
Malpedia lists YARA rules for the family in its Lumma Stealer entry, together with its report index. Malpedia (Fraunhofer FKIE)
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy