If you are into cybersecurity and are passionate about ares like Malware Analys or Detection Engineering, you problaby know about Yara Rules, if not, you can read the documentation. For those who already saw an Yara rule, might notice that almost always they have just regular strings which are extracted…
![[Malware Studies] VikingHorde](https://miro.medium.com/v2/resize:fill:224:224/1*-8Zo9ZDLpDabDsXXZmCN4Q.png)
![[Malware Studies] VikingHorde](https://miro.medium.com/v2/resize:fill:160:112/1*-8Zo9ZDLpDabDsXXZmCN4Q.png)
![[Malware Studies] Locky](https://miro.medium.com/v2/resize:fill:224:224/1*MzsSRP--FbSS0-ZgEqXjwQ.png)
![[Malware Studies] Locky](https://miro.medium.com/v2/resize:fill:160:112/1*MzsSRP--FbSS0-ZgEqXjwQ.png)
![[Malware Studies] Cerber](https://miro.medium.com/v2/resize:fill:224:224/1*ba3lDHmMWyqUoC9QL_Uihg.png)
![[Malware Studies] Cerber](https://miro.medium.com/v2/resize:fill:160:112/1*ba3lDHmMWyqUoC9QL_Uihg.png)
![[Write-up] LetsDefend — Suspicious Mshta Behavior](https://miro.medium.com/v2/resize:fill:224:224/1*__wSbffTXjkPCzVknMQ_yg.png)
![[Write-up] LetsDefend — Suspicious Mshta Behavior](https://miro.medium.com/v2/resize:fill:160:112/1*__wSbffTXjkPCzVknMQ_yg.png)
