I have found a malware binary, Which i am curious to see what patterns has been found from this file. Also i have a collection of ~1000 ioc's and yara-rule's related to Malwares and RAT's. I used Loki, yara-gui, The yara64 (i don't remember the link source) itself and some other tools but non of them are capable of scanning multiple rule's against a single file. Already written a simple python code (It scan multiple times, Not complicated) and it is so slow and messy:
import os rules = raw_input("Rules Folder: ") mal = raw_input("Malicious File: ") paths = [os.path.join(rules,fn) for fn in next(os.walk(rules))] for i in range(0,len(paths)): os.system('yara64.exe "'+paths[i]+'" "'+mal+'" --no-warnings -f -e -m >> output.txt')
So how do you scan your sample against multiple yara-rule's? Any specific or public(free/paid) tool or script which is efficient?