I will dump some yara rules from time to time over here ... feel free to use them, please give credit when used.
Maik Morgenstern https://twitter.com/TriggerMeHappy
Please observe the "Detection Rule License (DRL) 1.1" https://raw.githubusercontent.com/Neo23x0/signature-base/master/LICENSE when using the rules.