APT_MAL_PS1_SilverFish_Mar21_1

Rule Info

Tags
['SCRIPT', 'T1059_001', 'T1086', 'APT']
Name
APT_MAL_PS1_SilverFish_Mar21_1
Minimum Yara
1.7
Rule Hash
6101e217cabae252d8a8f948cefe35ca
Av Ratio
13.0
Score
75
Author
Florian Roth
Date
2021-03-19
Description
Detects PowerShell scripts mentioned in the SilverFish report
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
34
Suspicious (< 10 engines)
59
Clean (0 engines)
6

Rule Matches

Hash
Timestamp
Total
Positives
VT
87c2c73bb9244216f6a4c8c1a5e2749f6bb0b5f90ead1a0984b34e3891506a6b
2021-06-14 16:11:57
57
0
31600b5564371d86dfa53f608ccb2e467d20065a0215cd0581381e83a45a95ce
2021-06-14 16:01:13
57
2
9243c56f43c41376ba210a762c7465bdff7e3b9ef7154a44a61bf8ba8378e98f
2021-06-14 15:45:35
38
0
6c9c53fb5382cf29234a45fccd592510235e5ae86b5a58c5337a3baae2295742
2021-06-13 10:11:55
58
2
ae67d1975c7099ee4cb80348e49c222b25d31c94f944899e3af9f6c9f76768dc
2021-06-12 17:52:09
56
17
7147ad654973c344899b83fc6cf91fcc9ff39a83b5ef5d8521239fd2a37f8df5
2021-06-12 00:09:51
58
2
38928adae870764ddbd6fc6be56aaa8fff3043ab7dabbdcb762d519b3491be66
2021-06-09 16:20:11
58
1
85fda9140e2356752f4139c674b78e36e4bb5da57b7cff27d8db357a4357deaf
2021-06-08 16:05:49
58
1
18b8a69d239cffc3788232e365365bb46e1cd867177be37803de951f06c37727
2021-06-08 05:40:53
58
1
ae5be96039ed8bb610e77d80945bf08f4c49562a6e840cc6cd1b3c7fd893cb0f
2021-06-06 16:53:18
59
18
75b0382467d63ed18dbcfcb3879f73d700cafe6aef58991a29df1fc03f57ecec
2021-06-06 12:33:31
51
19
1dff1b9290200d0025700d0db24ce3212390fb793f9c6b2bc51db3bb6d104bd0
2021-06-06 04:03:30
59
19
29d5844485c3a7f11113c3391e59771ac1f2645a944bf1f75ff373d78b5a7d43
2021-06-05 22:42:59
57
1
7fddcde3e01662aad4c622f6c9c1bb2b42bed68f03b6fbc62cd59abbdbbf14a4
2021-06-05 14:29:03
59
19
13c34761365caee375bdd2415a32c4fab1ce1bc049f8c0f799c851cf666e7e16
2021-06-04 09:34:50
59
17
23a9aa5578b06a7163f3d92c3c9bf86ce4a07d7b9e37966de4782d3d36b52632
2021-06-03 19:23:37
58
1
d7b206f39b6f6996cb9472df9fa350ab9da7f1eca47f782c4e5d05ca338daaab
2021-06-03 17:06:35
58
1
0c4031f144f658f567bf6d9965a5920981102529e2c993c387607461e02937f2
2021-06-02 18:20:57
58
19
1af464a512b7841c59db4efadca61ff06ee62ec443a5b9a13647f256a03944d0
2021-06-01 21:47:40
58
0
98a5398146f637d3b322dee7b72de1bb9eed2190d50dfd47a2c6f3ed9e12f4a9
2021-05-31 15:51:30
58
1
05af9ed453d035108ccc6f544d7485cc49578d3eca78d1168d54b58ae2412f97
2021-05-26 16:19:45
57
1
28236bd9713fb7496c517801582d15d281ea6fea10594cdd0b2cdd891962d13c
2021-05-25 10:31:26
59
17
ada643c41375d325ebaeb14e0dbfb75c9b079c517b5689669f5fc8a8a208ed04
2021-05-25 10:20:55
59
16
65732faeb81bcb17509a9bc4c21211119f2e798c8ab1d99b9f085e0be50bd4a1
2021-05-23 09:49:46
55
1
d1e2e2dc19741a522871428396da2e844e76096de4e4f71135543f44f9a72a48
2021-05-22 20:09:14
54
0
3e8efc7d797fdd7e757be5f475d22465e03dd27fd91dfc54ec9cea2e28f3aff0
2021-05-22 16:14:53
58
1
28e97b9b78fa77e8a94e2156ae3b3072bd9437a9437880b5bd648342a071ac10
2021-05-21 23:03:44
58
1
ef12e1a74fe9fd083624d38f036325ebbe72cca082419c78da7b7fec3d5ebedb
2021-05-21 02:24:59
50
1
df5c07ee8059bd4da1b19066c547f5b9a701164522118ec2e040411c7e2fe734
2021-05-18 04:26:33
58
18
460920b9529d997b82a2dc7af625a78285f07d3f0412c316c4d624d7a9a0dac0
2021-05-17 02:23:34
58
17
96ebbd90bb49a5c3472fa18c7b37925153dc96fe87f80084703370e028ac7a99
2021-05-16 16:42:17
58
1
cac12fa92b56b839b3cf396fb271596333fbb580f2e39d53a0c1483b2b2aafc4
2021-05-16 15:22:33
58
22
23a3294b9e30a3f94194844482636d5b58ca8a925da2aafe05adb704f23ee2e4
2021-05-15 16:15:53
58
1
bef2bb96ec31839165995390f078e8758fd11ab3a646c62b1c346d99d04e7f31
2021-05-14 21:42:52
56
2
b250a0133b4d9566931272cf663dcc41d922151b3763a6abe284db9597141d6e
2021-05-14 03:13:03
58
1
ed41bd0246b8f3ff6ed065d29c2dd8507d106fb5186e0ceb0bebc6339e5375b8
2021-05-10 11:12:39
58
16
cc687f3c3d6f8f831e5fa1eba988a0469c73654b9ccc58cf40502f51308f02d5
2021-05-09 16:01:19
54
1
8f7fa6d3568e1b3737978da8d98feee9b26b4ae549b0efdb13fd0bdc8870bbb5
2021-05-08 18:45:21
53
1
7773e889ce0d35b60368608fd4c5e1d03106cf295434364421eead8013dd620f
2021-05-07 02:22:09
58
1
85962f20b97a4dc1c4d4dc629030447762c670310be49994d40e4326ce4a5365
2021-05-06 02:23:47
58
1
bb4d6f66f7245856b8c4012d4a16e3ca6372f2dfde56985b90f4029a83a86e41
2021-05-05 19:16:06
59
18
d707e5f27d98a7a528e709be5bdf51f80cf7dddb0d67b0161b22740f9335f8f1
2021-05-05 02:44:09
57
1
e097e0648d60497657bae3aa4cdd404fb1f1e8d20f16e84c50fc4e107c7c7271
2021-05-01 22:15:09
57
1
1d6607e7202c3e834ec4339b2dd6e8ac7131fe49e75ad39713866eb4bc858e46
2021-05-01 03:43:05
57
2
08f6bc9bc22e02f1a60da7756a072afa9f4672abf531efed72695db4c8060bcc
2021-05-01 02:17:12
58
24
a9f62035c5fb79a9662f3ba49959514f4257294819a21a67f960b9fdfaf75ed9
2021-05-01 01:21:33
57
1
e93e80dd9f7d8ef58ca84685610cfd39a85804379728d168b59f2e477165f29d
2021-04-30 18:33:49
57
2
3fbdc3abc133259306cb64bb428a2f3411bc8921e53c0236cd29f92dd5bc2bc5
2021-04-30 05:43:23
57
17
557e8c5136878f711ccd0dc553e9353832e26738d4bd50f6122079d66b6c3f2d
2021-04-29 21:13:38
58
2
fa193c70e1c8ae9182d131501d9351fe4b838a97c95a8da4513a71b8635cea89
2021-04-29 04:14:58
59
22
64ed3b709e0cc17f0ee7467bb7a979c980739db6da53f8ae60ca8d42eaf39ecc
2021-04-27 08:09:30
58
17
ecceb6f6174caff8f9c234383dcb6b34763a2f383dbd97aa2582a092479f75a0
2021-04-26 16:26:46
58
1
beb3a904cb9bb7b552469ebfdd31cbd66b97b707d5bc77f3a98958abc02e010e
2021-04-22 20:30:17
58
1
1d2a48cd67c86fbffa742c26c6cf55ec8e5386ba809776373811616a36a1566b
2021-04-21 23:27:50
58
18
5482c5463d19d1170571b78ca555a8e36437f4b7df8f8fdfbc8a3abd8e1532de
2021-04-21 20:26:40
55
1
c6800fb923371e71399e1a4beaf02e4b9ba6a2c690659400c6ce675fd3067212
2021-04-20 04:34:54
58
1
586d6b581a868f71c903097a3b7046f61a0797cda090a36687767189483e2360
2021-04-19 11:05:54
69
49
c1aad073129e781a1ab4c1209527a555dd8404943c7f322ebd39c12302f287f7
2021-04-19 00:18:51
57
17
db19f6440800d598c3c815d5593e053f095caa2596fa709143935cce9e2362ed
2021-04-16 23:33:37
58
23
cee6b57df6fc805f3ce50331b3dc516d5aebca2837c4f3bb4eb87ac5c5cb67f8
2021-04-16 11:39:09
56
2
fda3497d316553432df108a4f9d5e71c65577e89a8cb0283914c9eec058af6df
2021-04-14 16:55:01
59
19
5e05ea4053958c8e8d1fc2478228f4586c89354166db79d67f0a34986deb7d9e
2021-04-14 11:28:41
58
18
56d3d8642418312893bb3b72c5966a572dc81fed81c1778e08b4eca9b47f9baa
2021-04-14 04:19:03
57
1
37331e4160d96f55286acb7029b01b0cbeabbcd6768e1510bba874540ee9ebca
2021-04-12 18:32:05
58
2
baa83b8363b353a7126b540a2825b104fd0997e32324c0ca14e41f2829eae990
2021-04-11 16:20:08
58
1
4e0f69147172785c5d7fa41f2b1976e88dcc9a4312ee1dbf6f760f8bc77aa328
2021-04-11 02:14:45
58
1
86de37e17463c45f23cd1d4e81fb828f7e52c518817c09ef4886e53d187bb4b3
2021-04-09 04:23:17
57
15
ffb4e9f723969eddc2cbb0cc2fc09bda43b09441f845bff8d75f7820a6fc46c9
2021-04-08 15:30:01
57
16
6283b1b87eda609d35d76769379e82de259cc42f6834fb7c4490b2ac4767661c
2021-04-08 11:25:41
55
1
f0876caf79a8f95a03a2be2405df27e6477377b72bdaff49dfac5c86aa937ab1
2021-04-07 16:22:37
57
1
a37a03a02276bfec0c38052b2b25df398de8abf4298f80073fa4c0d206c2ef07
2021-04-06 21:09:32
57
1
84a3d6308c04697e1b736ba62d3f9cc8b94c0183714f67cf027c6681dfad47bb
2021-04-06 17:08:33
57
1
2f1ba5f06403af67bfc465fa78f5ab19854d4a7bbea275e51c60a0e76075664a
2021-04-06 16:56:57
57
2
213beafcadd776cb918f63762abba182bfce9732c1d87e7a2c4fdbf439583dee
2021-04-06 10:51:52
44
0
5378a115d2265781615381dbdb8ed90e08f85ab9b764bdc97bf16fde1fae699a
2021-04-05 22:38:15
57
1
dd7c0758c92d88882133aba21fe3062fe62acf7ad9add74629850afb0083b107
2021-04-05 10:45:46
59
28
038af8d46b51135e64452c1cf7037ace3fb5c5e7fae00629faaebb739e6eed23
2021-04-04 21:52:22
57
2
114c652f56a74023dbbd2b1a71975acaaece769a8e999eca4202d56de393fb81
2021-04-04 17:08:16
58
15
480465c5a3035778316a91281b6bde00f0b0ea0120a7dfb500dd2a1fa1facf22
2021-04-03 12:02:33
58
16
7e033770429273c9a84711fedbe7182e3f4c13249c621495df59dc27f40563e7
2021-04-03 03:10:31
58
3
f6f3d1d060274e114c80bcd35c3f5e97909cf6ffd793bdab27d1eb913a0d391e
2021-04-02 17:06:06
57
8
1960fd490a2b31062e2ec60fc01ad7e4f71726733a43c3e2edb160e7dd7838d1
2021-04-02 03:12:07
58
4
2a976a9101ac5b2fa5ffa36ba8a56fb11a4ffed8b40f5c43421ed12d1dabae26
2021-04-01 20:16:06
58
18
3431860be51a63570442eaf24ea2f61b62712a07edf9ef80f88006046700dffb
2021-04-01 20:16:04
58
17
6c3b1023a5d6f3ec91f7c9fc47a257f4754374d4b093ae8e2c50d930b019bd27
2021-03-31 02:41:45
57
4
540a1e6be7ae0b986560963102f9a06467f4c4adeb8f8c81bebf00519de7b17b
2021-03-27 14:18:00
58
3
69bb92c862293832f071443af3d3e4e0a49d00afc970d447d553915ab4f437a9
2021-03-27 09:44:50
58
5
cf19c279fc4513d8b74984d05a86bcf3f45d4b0d3f6456512bb3eb1ab784b113
2021-03-27 00:50:12
58
2
67ff5c5fd19b23fb92cb0a395c9e12729c3a31ae21b44bfccde671f84e18f9c5
2021-03-25 06:06:40
57
2
c1edb529431fe280a14a48dcdfe2ac1483f3814ae0bd41c0acedfc245cad8791
2021-03-23 21:56:59
57
3
748e2ef880f9a95dec4cb76bd8c457059a755dbb0aa33784740989c09a4bad4f
2021-03-23 17:44:24
58
17
c418acbe45ccaa7e66eb9db8fd595a89c8215c9ac5e2d151dd3389641e81b50a
2021-03-22 17:25:26
57
1
8aaeccf377d2eb3642f27b86dabd2937b3753e738c347fc7544ed5742f4f8f19
2021-03-22 14:39:05
59
3
b65273062c9be6bfc6343438e51d7f68aaecf8382ae1373ff1b3adfacff1fd5d
2021-03-22 10:51:41
58
6
38efc72b28b784846f0021dc77c89425d953907f4ef463d39c402d33bf4645bc
2021-03-22 08:56:50
58
14
3d2b2951706ada6f0e31261614148ffd4f390ca23aa8f87688b883cb1abda368
2021-03-22 05:42:19
59
0
15421054158850d1f2cf3f9f18e191f6567c641ab02cf901213652ea317a5310
2021-03-21 20:59:21
59
3
a18d64a6f7498cd9b72aa6cc69d636cd77386034a3944e8bef65c7be85e2d9d2
2021-03-21 16:58:59
59
14
e2b3fd9e98011f7d0d345c073c431cbb1e8cc07ba666845b609d54b66cc19f7d
2021-03-21 15:01:46
59
3

Rule Matches per Month (last 24 months)