rule H_RJ01293869 meta: description = "Detects the H-RJ01293869 ransomware dropper" author = "Your Name" date = "2026-04-16" strings: $url = "185.62.78.93" nocase $enc_ps = /-enc [A-Za-z0-9+/=]200,/ condition: $url and $enc_ps
| Tool | Command | |------|---------| | | Double‑click the file → Extract To… | | CLI | unrar x H-RJ01293869.rar /desired/output/path | | rar (if you only have the creator binary) | rar x H-RJ01293869.rar |
H-rj01293869.rar < SIMPLE · PICK >
rule H_RJ01293869 meta: description = "Detects the H-RJ01293869 ransomware dropper" author = "Your Name" date = "2026-04-16" strings: $url = "185.62.78.93" nocase $enc_ps = /-enc [A-Za-z0-9+/=]200,/ condition: $url and $enc_ps
| Tool | Command | |------|---------| | | Double‑click the file → Extract To… | | CLI | unrar x H-RJ01293869.rar /desired/output/path | | rar (if you only have the creator binary) | rar x H-RJ01293869.rar | H-RJ01293869.rar