id: insta11-malware info: name: Insta11 Malware - Detect author: daffainfo severity: info reference: https://github.com/Yara-Rules/rules/blob/master/malware/MALW_Install11.yar tags: malware,file file: - extensions: - all matchers-condition: or matchers: - type: word part: raw words: - 'XTALKER7' - 'Insta11 Microsoft' - 'wudMessage' - 'ECD4FC4D-521C-11D0-B792-00A0C90312E1' - 'B12AE898-D056-4378-A844-6D393FE37956' condition: or - type: binary binary: - 'E9000000006823040000'