Golang is a popular choice for malware authors due to ease of development, not requiring dependencies, and robust standard library. If your organization does not use golang applications, this may be a good thing to scan for.

rule golang
{
	meta:
		description = "Golang"

	strings:
		$s1 = "Go build"
		$s2 = "go.build"
		$go = "/go-"

	condition:
		any of ($s*) or #go > 10
}

YARA Rules Index