MalwareBazaar Database

This page shows some basic information the YARA rule ios_coruna_w0 including corresponding malware samples.

Database Entry

YARA Rule:ios_coruna_w0
Create hunting rule
Author:@Nadsec
Description:Detects Coruna's characteristic XOR string decoding pattern
Firstseen:2026-09-05 13:44:31 UTC
Lastseen:2026-09-05 13:45:35 UTC
Sightings:13

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter