YARAhub
You are currently viewing the YARAhub entry of the YARA rule Tool_Fakeinstaller. Depending on the TLP classification of this YARA rule chosen by the author, further information about this YARA rule is available below.
YARA Rule Details: Tool_Fakeinstaller
| Rule name: | Tool_Fakeinstaller |
|---|---|
| Author: | Nikos 'n0t' Totosis - @casperinous |
| Description: | Detects installers that drop and execute unencrypted payloads with the capability to launch also the impersonated cracked software as a decoy. |
| Reference MD5: | 79187195d75a83469f94d84887157251 |
| Likes: | 0 |
| Reference Link : | n/a |
| Malpedia Family : | n/a |
| Date added: | 2026-06-22 |
| Rule Matching TLP : | TLP:WHITE |
| Rule Sharing TLP : | TLP:RED |
| License : | https://creativecommons.org/licenses/by-nc/4.0/ |
| UUID: | 4bb3ce02-6bc3-49d0-89fd-ec09426f3eac |
| Static hits: | 0 |
| Unpacker hits: | 0 |
YARA Rule Content
The content of the YARA rule is shown below.
The author of this YARA rule has chosen to not share the YARA rule
YARA Rule Matches
The following table shows the most recent files matching this particular YARA rule.
| First seen (UTC) | SHA256 hash | Static matches | Unpacker matches |
|---|