CRC_10_poly_0x331__16_lil_refl_True_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule CRC_10_poly_0x331__16_lil_refl_True_ (No description metadata provided).

rule CRC_10_poly_0x331__16_lil_refl_True_ {
  strings:
    $a0 = { 00 00 d9 8d 33 02 ea 8f 66 04 bf 89 55 06 8c 8b cc 08 15 85 ff 0a 26 87 aa 0c 73 81 99 0e 40 83 98 11 41 9c ab 13 72 9e fe 15 27 98 cd 17 14 9a 54 19 8d 94 67 1b be 96 32 1d eb 90 01 1f d8 92 30 23 e9 ae 03 21 da ac 56 27 8f aa 65 25 bc a8 fc 2b 25 a6 cf 29 16 a4 9a 2f 43 a2 a9 2d 70 a0 a8 32 71 bf 9b 30 42 bd ce 36 17 bb fd 34 24 b9 64 3a bd b7 57 38 8e b5 02 3e db b3 31 3c e8 b1 60 46 b9 cb 53 44 8a c9 06 42 df cf 35 40 ec cd ac 4e 75 c3 9f 4c 46 c1 ca 4a 13 c7 f9 48 20 c5 f8 57 21 da cb 55 12 d8 9e 53 47 de ad 51 74 dc 34 5f ed d2 07 5d de d0 52 5b 8b d6 61 59 b8 d4 50 65 89 e8 63 67 ba ea 36 61 ef ec 05 63 dc ee 9c 6d 45 e0 af 6f 76 e2 fa 69 23 e4 c9 6b 10 e6 c8 74 11 f9 fb 76 22 fb ae 70 77 fd 9d 72 44 ff 04 7c dd f1 37 7e ee f3 62 78 bb f5 51 7a 88 f7 c0 8c 19 01 f3 8e 2a 03 a6 88 7f 05 95 8a 4c 07 0c 84 d5 09 3f 86 e6 0b 6a 80 b3 0d 59 82 80 0f 58 9d 81 10 6b 9f b2 12 3e 99 e7 14 0d 9b d4 16 94 95 4d 18 a7 97 7e 1a f2 91 2b 1c c1 93 18 1e f0 af 29 22 c3 ad 1a 20 96 ab 4f 26 a5 a9 7c 24 3c a7 e5 2a 0f a5 d6 28 5a a3 83 2e 69 a1 b0 2c 68 be b1 33 5b bc 82 31 0e ba d7 37 3d b8 e4 35 a4 b6 7d 3b 97 b4 4e 39 c2 b2 1b 3f f1 b0 28 3d a0 ca 79 47 93 c8 4a 45 c6 ce 1f 43 f5 cc 2c 41 6c c2 b5 4f 5f c0 86 4d 0a c6 d3 4b 39 c4 e0 49 38 db e1 56 0b d9 d2 54 5e df 87 52 6d dd b4 50 f4 d3 2d 5e c7 d1 1e 5c 92 d7 4b 5a a1 d5 78 58 90 e9 49 64 a3 eb 7a 66 f6 ed 2f 60 c5 ef 1c 62 5c e1 85 6c 6f e3 b6 6e 3a e5 e3 68 09 e7 d0 6a 08 f8 d1 75 3b fa e2 77 6e fc b7 71 5d fe 84 73 c4 f0 1d 7d f7 f2 2e 7f a2 f4 7b 79 91 f6 48 7b }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

5ba24419-9af3-48bf-8241-24e7d5322640

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion