APT_CN_ScanBox_JS_Indicators_Aug22_1

Rule Info

Minimum Yara
1.7
Tags
['CHINA', 'APT']
Name
APT_CN_ScanBox_JS_Indicators_Aug22_1
Description
Detects indicators found in JS code used in ScanBox framework used by Chinese threat actors
Rule Hash
4da4b4cf3962009018d1f23fc1173f60
Score
90
Required Modules
[]
Author
Florian Roth
Date
2022-08-30
Av Ratio
2.54

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
81
Clean (0 engines)
34

Rule Matches

Timestamp
Positives
Total
Hash
VT
2022-09-30 05:24:55
0
60
3a544f873f3782572e32c9e9a5dc88c7b938255a392ae1368a1f57c66838d014
2022-09-29 06:49:58
0
59
2045dbba3b9cd19bf7a71223a67b389f495d57130ed4869673fe088f3994fe88
2022-09-29 06:49:57
0
60
b7a6d1f6dafbd5625260ee3714dee53865480de778ca9efc2552338d7e20ea96
2022-09-28 15:03:35
0
60
af82298697fbe6ad68ac96b88c57e1da072d0ca1cd2fdb79baa2550a92d969d0
2022-09-22 11:58:35
0
60
1117d41fc6daf5ea63379c97bbad441083248b6ec0560c179a8dd17f83ecf4e1
2022-09-20 01:14:02
0
59
bfc70e42408b9951d32d7fddd19c6f1b549dabb188f3c6fe56f98d292052c6bb
2022-09-19 13:14:07
0
59
112988dbe427a0ee8191d4e9b913f45a96225c3eaf748ef0092b9a21e9308f5a
2022-09-19 09:07:50
3
59
46ac160645975c040ce036a89042f4b9782c895c4bc85f04cd4ed3b7e50c5fd6
2022-09-17 23:07:11
0
59
79ba2efab9853aac94c778ac11378aded7470bb6932f25cd3beb76b5a4cf9e84
2022-09-10 23:41:25
0
59
450fb0cdf056a271878813a7211b79bbf263e8836696354f083a2b54e88c8820
2022-09-10 20:11:27
0
59
f3bf4a78f8b70c4d88d6f605aaa458847f368d7196b1ddd8ed19c7997fa440b4
2022-09-09 16:19:34
2
59
8eb2f158382776c38c2d15775e2dcbcc87d9795182c18e427e35f183b9d1bd80
2022-09-09 16:19:34
2
59
6d1ff49d270ad516f87c27211374ef04feaa649f36f37973cbd29bd5b9a68f33
2022-09-09 16:19:32
0
59
69c8f0537911f53a5347f9e51b95af2f16f121aeece90805230296036ea57b48
2022-09-09 16:19:32
0
59
87ff9af3fd0154592cdd3aee6fb200f94887036fba13180fd94c87b6db703342
2022-09-09 16:19:31
2
59
4e398685f15ffcae264bf28e7240825100a36cab31d092d130c1dbd13686ca1e
2022-09-09 16:19:31
0
59
d634e879187ace3b7dd7b5bd38baac576c39606882ca64f968a6555e0b20934a
2022-09-09 16:19:28
2
59
7040b4c387a0d8c073febaf1cad9e0b8ae61dde9ba76c096323f75ed491ac867
2022-09-09 16:19:28
2
59
ce69ea2a49ee9fbfe18b97f92b5abed7757bbbce5b832e0d0e6df2694e7116f8
2022-09-09 16:19:24
2
59
03ff240f4e4340e2c53ac4cb67b4c20e0bb5fedbe269684a8d858cb3b5ec6621
2022-09-09 16:19:24
2
59
f52e11094f81d78f43a4a5d354a6b5642b252ae799c71a199f5fe4b098682edc
2022-09-09 16:19:24
2
59
f01e907c7ff9c9a3f81d5d3c8bb54e3cd12c48d1187fbcfae94256036f39733a
2022-09-09 16:19:24
2
59
4efc039c596a58c9e88e251f7d15d7111b7082a81647aac0e024e1d3988e4f0c
2022-09-09 16:19:24
2
59
65d71e5de9bab1a439df4f62abd8b27e04330551b4ff6c4c0cdff36a3568f192
2022-09-09 16:19:24
0
59
c1a39d7b6d126ee38936f3218a07b576512dffaefd3c0ed787d1b5ee0bb15033
2022-09-09 16:19:24
0
59
33dee952f03bbd56802dda05ad03ad433dd4ac081a44324a5e83400f48a2820b
2022-09-09 16:19:23
0
59
89e648a0482ef71094b912de2666a8d9ab8448a2869bb372494f367dc0db413b
2022-09-09 16:19:23
2
59
3e3b7d982ca6578cc9e87c4fc95729f0a7615829228938a659b727bc15ea9f9e
2022-09-09 16:19:23
2
59
c54963ed7a7bdb693a1c80cbda67fc175e197b6ad2d5e6e5b5c7de868d4dc688
2022-09-09 16:19:17
2
59
cea52a5a23ecdbd4a388e8a3b5d2e500a91f26ea76bc1e960e7ab6842283cf49
2022-09-09 16:19:16
2
59
a5f03bf2dab835159d44a4843f223f4a279c514000a057fcd149a8c465be4de2
2022-09-09 16:18:14
2
59
1a2faf4627c2ef7abacb492640d93c37f7c4ec53dd2e460831e741c81466c7f7
2022-09-09 16:18:11
2
59
8c32722e93231088e4248ca73312b9abdc529c592f3cf08af101c81acabccf13
2022-09-09 16:18:10
2
59
7a8f60f519b43fa340029a1a303d8a5ab3c8586955e952766403e80d6898b298
2022-09-09 16:18:07
2
59
096a607c79f79e290f8101928c383e524d6e636a8da838e896c6c9ab9ce6abd5
2022-09-09 16:18:06
2
59
9af1908b3373bc25c53fc3a96bd66f63b34fe0de2e819039ccbc8b815f3daa82
2022-09-09 16:18:06
2
59
50672da1b7437b79b47212ababe45a86ffac1277b854ddc36632c5b745477854
2022-09-09 16:18:03
0
59
79381acb1fb7d2d6c0ff3671b185342520ed41fc1f4cf27e5afb9c1266a0b1a4
2022-09-09 16:18:02
2
56
87510e0ef2cff6c492a708288631886b891b026dc405216c2fbdb8b6fa80c292
2022-09-09 16:18:00
0
59
2a7bb6c92119a6da45a1d4531c5b109fc21a5274934e7eb35d2d919622035f77
2022-09-09 16:18:00
2
59
90ae634bcd849f24a3642c754408ba5833b2dea752599f9353a74c6afdccb048
2022-09-09 16:17:59
2
59
50dc7b957f4990506bde1f6bb6143b4aca4b20f35f7b6348757c9d7ed0ac4333
2022-09-09 16:17:59
2
59
d1336e56bd80741db4aee1e035935802053e69ef916551d1081eb2bbd274ca37
2022-09-09 16:17:58
2
59
fba55b27ce6e4e12c841045c3bc99d7d89438f0cd53595731f0d5a0fea50c914
2022-09-09 16:17:56
2
59
d4d8113744069c5fa09ea50013d6925dc42079e59bb7120117ddbd936604abba
2022-09-09 16:17:55
2
59
93650cd5938ee92ebf891339a16aabeb28b5481d04c866eef547166b1cef2935
2022-09-09 16:17:55
0
59
e9e104f27e54f99f6a277ba117086e514211a8d3f4a2c9eabd45c91273c8ced3
2022-09-09 16:17:53
2
59
eec8dfd029094b1d52f62797ac464ba9e3bbaaa9e8535faf8d428b5cec3a0116
2022-09-09 16:17:53
2
59
1fcbe772a65c31e169f68e0955e7a5a917a4d1501b17741c69e278099e2b5a38
2022-09-09 16:17:53
2
59
166393e0ebddd09ce64e8c9ffa96316ace7ff943436bdbf9731a2a1f715b43a9
2022-09-09 16:17:52
2
59
5de8065629551b52bb39cbe4449df28b4690230124da70965c8a812d6637c871
2022-09-09 16:17:52
2
59
09290161cee0c1b57186b6a150305c6aecd1bd637d808b1604262109e4b328d3
2022-09-09 16:17:52
0
59
24b66b2b09b43297d2065ace2454d6a2fef18d4abca14cd3d814cdbad02c04af
2022-09-09 16:17:51
2
59
326c9d45b7087f42658da4d1b30c23b094530b7c23ca2275368dcfe0661fd74a
2022-09-09 16:17:50
2
59
a4f2f6c6aa60b826a39d4b2374e80c6fca85a53bcde5d10c54092eeb69e49805
2022-09-09 16:16:48
2
57
6d3e073a7897942373d5dd95fe8607055cb98ba3807510f1ebc4f55ee2328988
2022-09-09 16:16:48
2
59
bb27c98c1a655647419161579f3a18d8d31561f99127b5e8bde1f1d460e86ca3
2022-09-09 16:16:48
0
59
f0db0428f96514095fdb532da272d54bf115cc9b04c60928eee596a3eb8a495b
2022-09-09 16:16:46
2
59
f2e99bff0ad767705f633c8290cd20a02a69031de12af828b98f831e55cfa20d
2022-09-09 16:16:46
2
59
e95df891b0912652cede501ea2ab9752271c4376ed7521c67bad86ef3abd1b24
2022-09-09 16:16:45
2
59
b6452f59683683ea35463fa3de7d316a7162ccd7d1ae0041ecaa1f9914947e71
2022-09-09 16:16:45
0
59
1041179d72d0fce79b0f1a32049633f96b5b0f03042799053e84bb77cc9c20cc
2022-09-09 16:16:45
2
59
7076e1249a5f6a9c8c542c6a875f04708d9ade9f0a83901b9d77ff19b5624fde
2022-09-09 16:16:45
0
59
bfd07d631eb479fab83cb6335a68fbf25e2620a282b6a5a98f8be375126e3429
2022-09-09 16:16:43
2
59
90b5b95e2970a43824ad53be4fa09693552a20f517e5fd376e3af2da405dffd7
2022-09-09 16:16:43
2
58
3c59c3a3762f13f2143a14da9cef7a16bdec134b28b54afed812ce260fa8d3d1
2022-09-09 16:16:43
2
59
c4ea4c2553dd768aa70fa045065a9a81fa3c38c9a3e91e97f3521b73f25c91d8
2022-09-09 16:16:43
2
59
880540f555ccd50b84e90d7b88d0b8478fd013d9186dff7ab703a91682c4cad0
2022-09-09 16:16:43
0
59
8ec4657d1119f1a8b6d59fc8b051142978ca7e03c83c5d56874b5f0646f0d919
2022-09-09 16:16:42
2
59
15e8af03e19cf01d94b9c52ce6ea1f782e16f955637ae1bd7f4b58d8bf746ce5
2022-09-09 16:16:42
2
59
b12b7e235c84220f1ab821d8e287bf07ca5a7e32ab6eeede7479705fd7b25ed4
2022-09-09 16:16:39
2
59
e55d1cc08d521ba68c0db8690fe4e6c4ef87f642761a766f3073c1b64c35ec9d
2022-09-09 16:16:39
2
59
b93535c7e3bac82f3b4036f406a47d148f6fd2241dd1b3113d38eb730715ddc7
2022-09-09 16:16:39
2
59
48f160f7c3a6d2b115264b56089ef699af1f26b37111466d8f840a17e98050d8
2022-09-09 16:16:39
2
59
409f89070d8af305c9b752812b8fcdd7f92274cfa3e31d108947665bfdac02d7
2022-09-09 16:16:38
2
59
e8ce1eafde58b9a6091c5c21e293928991fb52587c22176852eb225ddb7b788f
2022-09-09 16:16:38
2
59
a4cc1969b2dbc972b26ab9dab8aaf67d73773cf0af3ea2933c4e6bcc03f77874
2022-09-09 16:16:36
2
59
3387625306825df985412db19a76be3302da5b3d99c3af06bfd40efe2273e6ac
2022-09-09 16:16:36
0
59
b31a0fd24cf404debcc9d9d557202c77e64a3958cde27cfc7360997176db4cfa
2022-09-09 16:16:36
2
59
c53c48512f8b28b38f2b6343b222cd6e19702ff2cf1b1ab738fba260f296ba0c
2022-09-09 16:16:34
2
59
a4dc195866edb95899d4b8fd17c6cd53c1070fc843d85af8f49010ef1dd79759
2022-09-09 16:15:24
2
59
3f88d9f0f2086b0e3df89d8485d9dad0a7ca561de156b1b744f56abead75af7d
2022-09-09 16:15:24
2
59
9ea9e2a938b8582916db81825fd5eb3fb70961364ffa0537c44b96775040bea8
2022-09-09 16:15:23
0
59
f1759c0879e247a1d4ffede700d22c5731ad5c81a8c7394a46ec5c37519508c2
2022-09-09 16:15:23
2
59
e6bdda8864685825139663be35dc87794140693ec50f60514303dc81cee3c093
2022-09-09 16:15:23
2
59
f1718da633102b95725e7397135b166a517587e12164a16c47c48e01a97dc135
2022-09-09 16:15:23
2
58
33e4b2f7e2290c719f014d00b64696e5fc3d7ebc37272f90cde7d997da34049d
2022-09-09 16:15:23
2
56
af512db888032c8582a774307fe0945ed47af68d4e3b7cc3cadce56801bf4744
2022-09-09 16:15:23
2
59
29488bed00dc12a612fa74c6b9ce6abace9772c5c02a152abccaabf341e7b75e
2022-09-09 16:15:23
0
57
4ac2cc16596cc23b383caff954fb2eecc6c69237b0b1657095c408c68d484719
2022-09-09 16:15:19
2
59
724b21126e934786ac6b9eaa471f515d56f474faca9a4bace27df06f7a2ed510
2022-09-09 16:15:19
2
59
d792ddb6583c386b03dfc682177a2490d27832968409038c2f8dc1f55bf114d5
2022-09-09 16:15:19
1
58
37f123167316cccbb7c999ed02ecd454e8a6860dc945812ecb71b74520c09008
2022-09-09 16:15:19
0
59
f07d993649dfed1d29631b30dd8d29ce89c33415a88652150c619d663cfff994
2022-09-09 16:15:19
2
57
642978424247ea6b2e02437eee23ce6346b7f28948a847f460023ca191f813c3
2022-09-09 16:15:19
2
51
68927c823968edbb77b75342010cd57bd52982e3526b142215ced0bf6529726c
2022-09-09 16:15:18
2
59
ee176b340a9878b9ce288908633462dfd77637eb089951967a65254d09f1a7b4
2022-09-09 16:15:18
0
59
e476b4898aa273ce9170f276f343612a2a83ef4017587c0ebcab3cf323f58ad0
2022-09-09 16:15:18
2
59
70c161f915320b23a532b794a86c4f6c6112b8bfdca4857280db300d7b6c8586
2022-09-09 16:15:18
0
59
17643f5e5b64abe9c9ef054464775d6748f7936d5e4654e9e43d4c5b6a2818c8
2022-09-09 16:15:18
2
59
9775b3ae81084494aefbbc3f55ab367e66090b25b2e5fafe86231e09c45f795a
2022-09-09 16:15:18
2
59
ddcca6049ecdad3a7f189ff49f62ebe5a0b3aede13f09f182e250a4a6499ff6f
2022-09-08 10:07:19
0
59
59a3ca5eb863a697c9e10f8350916922517e8db226e09a1c6cfa7ac83dbbd6cc
2022-09-07 23:39:45
0
59
202ec4774e7937b9fe45ecaeedc7d1fe8431f71be9342566f3b9e1553b0a4160
2022-09-07 01:34:01
0
58
a098a7c1f93ef10dc3db6db5ee077bed9ba03748bea889ceadd7a7b80e911740
2022-09-05 12:28:17
6
59
5a1c689cddb036ca589f6f2e53d323109b94ce062a09fb5b7c5a2efedd7306bc
2022-09-03 07:10:11
0
59
eeead2c2bfa1f6fb7ea0a0eddaf7c8976f189b0842044544b14ee8f049ed2dbe
2022-09-02 01:24:04
2
56
cb981d04f21a97fdb46b101a882a3490e245760489f4122deb4a0ac951a8eaee
2022-09-01 21:58:18
2
57
2a17927834995441c18d1b1b7ec9594eedfccaacca11e52401f83a82a982760e
2022-09-01 21:26:33
3
58
2f204f3b3abc97efc74b6fa016a874f9d4addb8ac70857267cc8e4feb9dbba26
2022-09-01 18:14:30
3
58
e8a919e0e02fecfe538a8698250ac3eaba969e2af2cc9d96fc86675a658e201e
2022-09-01 13:17:06
2
57
18db4296309da48665121899c62ed8fb10f4f8d22e44fd70d2f9ac8902896db1
2022-09-01 13:13:17
2
58
3d37a977f36e8448b087f8e114fe2a1db175372d4b84902887808a6fb0c8028f
2022-09-01 12:18:46
1
58
0b9447cb00ae657365eb2b771f4f2c505e44ca96a0a062d54f3b8544215fc082
2022-09-01 11:13:20
6
58
7795936ed1bdb7a5756c1ff821b2dc8739966abbb00e3e0ae114ee728bf1cf1a

Rule Matches per Month (last 24 months)