{"group":"noescape","count":1,"rules":[{"rule_name":"noescape.yar","rule_text":"rule Linux_Ransomware_NoEscape_6de58e0c {\n    meta:\n        author = \"Elastic Security\"\n        id = \"6de58e0c-67f9-4344-9fe9-26bfc37e537e\"\n        fingerprint = \"60a160abcbb6d93d9ee167663e419047f3297d549c534cbe66d035a0aa36d806\"\n        creation_date = \"2023-07-27\"\n        last_modified = \"2024-02-13\"\n        threat_name = \"Linux.Ransomware.NoEscape\"\n        reference_sample = \"46f1a4c77896f38a387f785b2af535f8c29d40a105b63a259d295cb14d36a561\"\n        severity = 100\n        arch_context = \"x86\"\n        scan_context = \"file, memory\"\n        license = \"Elastic License v2\"\n        os = \"linux\"\n    strings:\n        $a1 = \"HOW_TO_RECOVER_FILES.txt\"\n        $a2 = \"large_file_size_mb\"\n        $a3 = \"note_text\"\n    condition:\n        all of them\n}","sha256":"00ebfc853034c7733b9ddad1e65d4e85320c06887fe0c1f6512ce839b9cea21f","byte_size":748,"updated_at":"2026-06-24 05:16:03"}]}