SHA512__64_big_AND_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule SHA512__64_big_AND_ (No description metadata provided).

rule SHA512__64_big_AND_ {
  strings:
    $a0 = { 6a 09 e6 67 f3 bc c9 08 [0-20] bb 67 ae 85 84 ca a7 3b [0-20] 3c 6e f3 72 fe 94 f8 2b [0-20] a5 4f f5 3a 5f 1d 36 f1 [0-20] 51 0e 52 7f ad e6 82 d1 [0-20] 9b 05 68 8c 2b 3e 6c 1f [0-20] 1f 83 d9 ab fb 41 bd 6b [0-20] 5b e0 cd 19 13 7e 21 79 [0-20] 42 8a 2f 98 d7 28 ae 22 [0-20] 71 37 44 91 23 ef 65 cd [0-20] b5 c0 fb cf ec 4d 3b 2f [0-20] e9 b5 db a5 81 89 db bc [0-20] 39 56 c2 5b f3 48 b5 38 [0-20] 59 f1 11 f1 b6 05 d0 19 [0-20] 92 3f 82 a4 af 19 4f 9b [0-20] ab 1c 5e d5 da 6d 81 18 [0-20] d8 07 aa 98 a3 03 02 42 [0-20] 12 83 5b 01 45 70 6f be [0-20] 24 31 85 be 4e e4 b2 8c [0-20] 55 0c 7d c3 d5 ff b4 e2 [0-20] 72 be 5d 74 f2 7b 89 6f [0-20] 80 de b1 fe 3b 16 96 b1 [0-20] 9b dc 06 a7 25 c7 12 35 [0-20] c1 9b f1 74 cf 69 26 94 [0-20] e4 9b 69 c1 9e f1 4a d2 [0-20] ef be 47 86 38 4f 25 e3 [0-20] 0f c1 9d c6 8b 8c d5 b5 [0-20] 24 0c a1 cc 77 ac 9c 65 [0-20] 2d e9 2c 6f 59 2b 02 75 [0-20] 4a 74 84 aa 6e a6 e4 83 [0-20] 5c b0 a9 dc bd 41 fb d4 [0-20] 76 f9 88 da 83 11 53 b5 [0-20] 98 3e 51 52 ee 66 df ab [0-20] a8 31 c6 6d 2d b4 32 10 [0-20] b0 03 27 c8 98 fb 21 3f [0-20] bf 59 7f c7 be ef 0e e4 [0-20] c6 e0 0b f3 3d a8 8f c2 [0-20] d5 a7 91 47 93 0a a7 25 [0-20] 06 ca 63 51 e0 03 82 6f [0-20] 14 29 29 67 0a 0e 6e 70 [0-20] 27 b7 0a 85 46 d2 2f fc [0-20] 2e 1b 21 38 5c 26 c9 26 [0-20] 4d 2c 6d fc 5a c4 2a ed [0-20] 53 38 0d 13 9d 95 b3 df [0-20] 65 0a 73 54 8b af 63 de [0-20] 76 6a 0a bb 3c 77 b2 a8 [0-20] 81 c2 c9 2e 47 ed ae e6 [0-20] 92 72 2c 85 14 82 35 3b [0-20] a2 bf e8 a1 4c f1 03 64 [0-20] a8 1a 66 4b bc 42 30 01 [0-20] c2 4b 8b 70 d0 f8 97 91 [0-20] c7 6c 51 a3 06 54 be 30 [0-20] d1 92 e8 19 d6 ef 52 18 [0-20] d6 99 06 24 55 65 a9 10 [0-20] f4 0e 35 85 57 71 20 2a [0-20] 10 6a a0 70 32 bb d1 b8 [0-20] 19 a4 c1 16 b8 d2 d0 c8 [0-20] 1e 37 6c 08 51 41 ab 53 [0-20] 27 48 77 4c df 8e eb 99 [0-20] 34 b0 bc b5 e1 9b 48 a8 [0-20] 39 1c 0c b3 c5 c9 5a 63 [0-20] 4e d8 aa 4a e3 41 8a cb [0-20] 5b 9c ca 4f 77 63 e3 73 [0-20] 68 2e 6f f3 d6 b2 b8 a3 [0-20] 74 8f 82 ee 5d ef b2 fc [0-20] 78 a5 63 6f 43 17 2f 60 [0-20] 84 c8 78 14 a1 f0 ab 72 [0-20] 8c c7 02 08 1a 64 39 ec [0-20] 90 be ff fa 23 63 1e 28 [0-20] a4 50 6c eb de 82 bd e9 [0-20] be f9 a3 f7 b2 c6 79 15 [0-20] c6 71 78 f2 e3 72 53 2b [0-20] ca 27 3e ce ea 26 61 9c [0-20] d1 86 b8 c7 21 c0 c2 07 [0-20] ea da 7d d6 cd e0 eb 1e [0-20] f5 7d 4f 7f ee 6e d1 78 [0-20] 06 f0 67 aa 72 17 6f ba [0-20] 0a 63 7d c5 a2 c8 98 a6 [0-20] 11 3f 98 04 be f9 0d ae [0-20] 1b 71 0b 35 13 1c 47 1b [0-20] 28 db 77 f5 23 04 7d 84 [0-20] 32 ca ab 7b 40 c7 24 93 [0-20] 3c 9e be 0a 15 c9 be bc [0-20] 43 1d 67 c4 9c 10 0d 4c [0-20] 4c c5 d4 be cb 3e 42 b6 [0-20] 59 7f 29 9c fc 65 7e 2a [0-20] 5f cb 6f ab 3a d6 fa ec [0-20] 6c 44 19 8c 4a 47 58 17 }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

e091ec20-fb3c-4e06-bc95-813fb7d355cc

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion