MalwareBazaar Database

This page shows some basic information the YARA rule APT_MAL_WinntiLinux_Main_AzazelFork_May19 including corresponding malware samples.

Database Entry


YARA Rule:APT_MAL_WinntiLinux_Main_AzazelFork_May19
Author:Silas Cutler (havex [@] chronicle.security), Chronicle Security
Description:Detection of Linux variant of Winnti
Firstseen:2022-01-17 13:03:25 UTC
Lastseen:2025-12-19 22:33:38 UTC
Sightings:3

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter