APT_PS1_Snip3_Crypter_PowerShell_Helper_May21_1

Rule Info

Required Modules
[]
Date
2021-05-07
Rule Hash
906695209f47e6bb9b8a526af1805d87
Name
APT_PS1_Snip3_Crypter_PowerShell_Helper_May21_1
Author
Florian Roth
Tags
['SCRIPT', 'APT', 'T1086', 'T1059_001']
Minimum Yara
1.7
Score
85
Av Ratio
13.47
Description
Detects samples mentioned in Snip3 report

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
30
Suspicious (< 10 engines)
56
Clean (0 engines)
0

Rule Matches

Timestamp
Total
Positives
Hash
VT
2021-10-20 19:38:08
57
2
bc9a41cdb2a726c75db7df59360aa92b8f315deae65bd6c2bd2ecfb518ab53e0
2021-10-18 13:19:58
57
4
0da8bc7e684f9b52a3650764263a0e54cc3a4fe02fe40df7eb618a56ba539396
2021-10-14 16:53:00
43
5
2ed9992ce22e1732f2ce9824855bca538dc6059778d0ee327b3ddef37213215b
2021-10-14 12:35:02
57
6
322f05b85220a6b9ec6106fd867e414fa335d8d61ce4167d31e74232d979801d
2021-10-14 07:08:14
57
5
e73cf088fe7f739370ea226f1afbf172608d9a14af240fd58411ccbf21c7d27b
2021-10-13 03:51:09
58
10
5af986755a202f201b7cc29732abe382dbdf6ce44d367e7416a0e65f34c2cdef
2021-10-11 23:42:28
58
4
c49170ddd92d5971c3117a330f27c294697257b7c4d58956c622f966709583cd
2021-10-11 19:54:22
57
5
551321626a1769750d0429c915c07e3ff23a92cdd975687add79b79794b0e7c9
2021-10-11 18:36:17
58
5
f927621a7bd2548f85a44695c585163e5d258ba8d2c81eb1d3b00b237443e3cf
2021-10-09 14:50:10
58
14
e5e4e28a7703165262cccd352169611a8d44114bfac7d3562ea292e996f1ee4c
2021-10-07 15:04:07
58
9
79c9f93f5fc5ead0c95e284822662b18c2d3ba493bdee4280dc708d22e4ae431
2021-10-07 12:22:10
57
10
cfa40f0fec496888a22ddf61803cc9ddfdabf06d85d4fedf7efbed59d29b9eea
2021-10-06 06:09:31
58
10
c50c199e1a1617dfa1228cba79e667d55a1dc8d8152fcd48774e842638e649e2
2021-10-05 18:31:21
57
1
c4e7fed868e9141630c30385943d95b65600972ccf6b2039358a179d40335b8e
2021-09-30 19:57:45
58
12
862264677d6b6e259bd4a2587dd25f17d2325e78f36c30efcafc127e32508caf
2021-09-30 14:10:37
58
12
7c64fdca7b9f16e900e4141d8b6d66f4539732ff1317979f1bf5ca0b7c0438cc
2021-09-21 19:24:59
58
11
c58e12153f865eacb7a9271d873487f829a736bf32c190998838ab47cac37e41
2021-09-21 10:06:59
58
10
b99579a23209460192d8062e29cd80810c724696aa36fb5e7a81c1392102cdd4
2021-09-20 16:38:18
58
12
f26cbbb72f5c2b98820f372fa3d213158215d06586953fc0c292eb32bdbd38d5
2021-09-17 19:39:54
58
9
18c0111be273d6c48150dc778f88c1de58b5261131e2388f96c97ec588c3f755
2021-09-17 19:24:48
58
10
e1b877dc79e17ea3337ad66040c6ccbc720e9086e2c9550456d898b19af70312
2021-09-16 15:05:49
58
5
a6f3d545555fe21d8c3a76652f3777260a79b936362db61f15c7cfd33eefdf42
2021-09-12 16:30:46
58
4
0d9937ff3380d575397c7dae4b22267d42a029956d45a16f956cddf479c3cf59
2021-09-10 10:03:55
58
6
03cae8434b3118d981a1d6525109c7cc31806496455438479f5073322896a0e4
2021-09-10 03:21:56
58
13
0884a61ac55d26421e68bf6d160ac40391916e191dc4b37f1eb05dc220f99bfa
2021-09-09 15:03:52
56
5
18c782c7f7c24824dccf5fe11479eef659f169825284023b049a57940a647d67
2021-09-09 03:06:36
58
14
daad006e1bc2c6d9bc02622023183bfadf17187de005249b76417f9f8fdd601b
2021-09-08 21:28:29
58
7
f198b6a58e64f3ea0e453e71901eac5b17d476e881b605c1edc1ce09050b99c1
2021-09-07 19:43:11
58
5
bf3b08e1caf5ea7735b16ae54066f53ca5d61ca08df99c9a8578a3ab88280e2b
2021-09-07 18:35:49
57
4
a67cb849f20c6aeaed79f75dfc52a44be4fd9246b5873e6635c83a086c4fedad
2021-09-02 22:03:49
57
3
a6eca39c1bfa2e285ea50a5de74e1bcb1e56d9f244c7ab3144cce3daf586d5ab
2021-09-02 21:44:36
57
3
d16cb614269bbbadd67f4cf0a5f5a7e857c6cf2541f795258ceac91416099ead
2021-09-02 21:15:32
58
7
2d9a962bd68e1891efbfb06f8d9f8a284f00e51a7821d5ae320c20d93baf2a3a
2021-09-02 20:27:28
58
2
570a431edf8777ffaddef7d4381ef0b9e9436632c05ebba187c714509e5af9b9
2021-08-31 22:04:04
58
6
a2846544548c2b4f87701703f73f8edd644ad42eae4cfd2751f98afa005875c5
2021-08-31 13:00:01
58
4
46bb5e20647caef67644bb74d207e11990c2f7435a248a76d00c9dfec0dc8720
2021-08-25 12:58:26
58
4
895d054cbdfd008dde4afcacfa1eeec3d033762f957b20a4b471e5a58f260505
2021-08-25 04:49:07
58
3
d9cfdea62d4a3acc5ec47cfc0349002af129add61611a0810b73394bc7ea3020
2021-08-24 14:51:54
58
3
68f2d4037eadf15f2a3023370a0be4dd669c16d2393ba2198e8110cade972e8d
2021-08-22 19:58:24
55
2
c31f05aa5c69425da86c1a893d59b22bd2fa75cfe15a64dbd6201dc0810b45fc
2021-08-19 17:45:15
59
2
b6f46da05a0d5447e4bb7af4d6389504d84c16db0520f999041422f6b00d5d4d
2021-08-07 23:42:19
58
2
93c5f8c29adf7ec748cf42669e717cca2c314a6facac74b164538045be4c3470
2021-08-06 13:50:57
59
7
ecd4928c2b86ab6dcef8aad2a653059581d453224deda602ee701341ff833c43
2021-07-03 23:18:52
59
22
9688c991a4ff169ba08c92fd336e16d5664823f3c96224e5b4dbb8bdab1f335e
2021-06-14 15:28:50
58
6
db0843ab2693cf4ba64686b044ec6f018d2871dd6b68d7e74f3b715eb62d74c7
2021-06-07 03:26:54
59
10
17af33a4e6cb60263067070070c323001de99dd89aff5739513d79a18c38bc05
2021-06-05 17:52:21
58
10
4ccc0214f88e34a04c7d139c2c158fcd2556e9081aac03895d6cb1366b89d9a7
2021-05-27 08:31:37
59
3
9b65a17d8151bda65e7d4c5b027462abacdcbd78ac6083d2ec16856563c78175
2021-05-25 15:20:00
59
3
e069e693abccf912686e36bbbe80e40a9b6107f31726678cea6fa00737e26a47
2021-05-25 08:01:31
59
3
bb07f1d1b8e23758fdd85fea9638228521155ba811fdbad4b82044888bc57c92
2021-05-24 18:11:49
59
3
8ff23dd02a8a61bf135376f4094717a533ff731cf8dfeb49df5ca186c6f8bca9
2021-05-22 01:28:23
51
3
dafb133658eda109c8c273eb31900e28b607fcf43ed1706b7fb9d567d4443833
2021-05-22 00:56:01
58
1
26baf65eee380ee06f5649173b4071d068fb019736a92d49e543a9e110c84b45
2021-05-18 19:13:13
57
7
c53f5e58be5610053075ee52e085f727461ad9945405b7e424cdc7644e8f1764
2021-05-13 14:04:49
59
14
1c0cf156221c48f7270e751b73339db40c60dc9159f41e4fc8a2caaef53ccae7
2021-05-13 06:32:42
55
10
2f00ea92a100d9803bf5fe907a607d92be22e2410ffbb559e4109ddd193d9f89
2021-05-12 22:39:59
58
6
7b990d9f60911aa458d9517d5a2ff950bc109152e6095d8fb728cfe57e8dbe9f
2021-05-12 07:31:30
59
24
76cfef39203199224c8bdf5068a4ae8ad97c00a6da3ba5765b6e4ca0a95a4da5
2021-05-12 07:22:04
59
11
3248338f08f0a3316dd06a3893ff4a38459eb812d2463265deb73eef4dfcddb3
2021-05-12 07:22:04
59
11
373b3164c16714061fa622406c3a012b44f1b6dfdfe5874fdd8e9bb8517a8598
2021-05-12 07:22:04
59
17
61b335f21eb74fdff0d12516e7995be1196807ac3b6f4fb0d5dc40a27cb19462
2021-05-11 19:28:21
59
9
89fddc876d6b3361170d9d776ab72396a2321338c15bf5d13bf18a7d41d12a99
2021-05-11 19:26:09
59
9
5fead40e3e8feebbad0847abc15af72969fa60d19c2516fce00c8fa9781fabd2
2021-05-11 12:39:30
57
5
79ecbdfb6ce491a9e5d4d63357d6e82464a435014522b61e300c973066a63d22
2021-05-11 10:03:38
59
9
f506c6e386c0d03d67dc82a635bd163b079c1be05fc9b288954422b6ad51111d
2021-05-11 10:01:25
59
18
d1f92c57c99756b45074e5a4450a5ee60186cd34fab75921bb12d58428e5b0ce
2021-05-11 09:54:52
59
15
b4c432638f72d5a9ebb995b87383598bf5e373bf1c6e8236fc5e308a3cd67d89
2021-05-11 09:54:51
59
5
a7228826ebfe312b7498cc1d990c9bc204118202e2d2f9dc3a828bbe7befd667
2021-05-11 09:53:49
59
19
a46f4721441cbabed3a8dc3be2a63cc7820d619ee8e612923d19f4b418a48302
2021-05-11 09:51:33
59
10
825e922dc9f1814625dc7a48824e853f63c08e56766fa988d18119c2f900039c
2021-05-11 09:51:30
59
8
7e4b04eff7a729492ae46042d0d7183b0e29f111bdea019a1b14d07744df4c23
2021-05-11 09:27:18
59
10
00381ab5055eadf6e2e3d3b54519b2fad6b70354c3e7efc44a3dc81c80357228
2021-05-11 08:43:32
59
10
c75a2077890df7bd8197a904e8d19ab59db98b393056f845ab6cdbda68d341ce
2021-05-11 06:40:14
59
9
dc9235aef30fe449643732255a7a57c0a28b5e92dced369442c0b18378bad91a
2021-05-11 06:08:25
59
17
9c6c9115420eb317d294ae65768bb0f65facd77fb3df489a7a8f301808ecfecf
2021-05-11 05:41:03
59
9
323a3dc7c54ac8653019de489d1411647d0a5c486d4cde836fa03fbab852be79
2021-05-10 17:33:04
59
8
9e70c5b4e6bbfaa1f7d410b0d79aae92c23a88ce32f7b6e651bfcfeece407bf7
2021-05-10 17:33:03
59
7
d88abf38f8dc5f4094dffa816021922488b318119ff8ceb2c236ea6085df1a48
2021-05-10 16:59:45
59
7
721e44289afb034e90a67fb97eb5efd4d469bc95ba9863f16aed5e5909c76c61
2021-05-10 05:35:17
59
4
39e38ddbbb0de7ddb537d1bfa71012a1490d97943a514bfa768798aebadcae44
2021-05-09 16:17:56
59
3
a0b8635c9a7ed11f8d279bdbe0e368908ffd31a5caeb7fc9ae491f86347b4c6b
2021-05-09 09:32:59
59
13
6a5b719d891f1eb61d97257cec527d2dfd7a480cb62dce353fbc445306e17cde
2021-05-08 14:43:15
59
20
fd2c48534e4067d84af2efd9d66007ae724a39b42ddf8e19a7f5ca3d32936d40
2021-05-08 01:20:46
59
3
36abe11b1ddfe51822be3c43ec9e642a40df7905005831a75418146b71fc0c27
2021-05-07 23:03:18
59
2
f455bb93dfd90f3c3572ab67a83da87e656f144aa72162d5c6661989487481bd
2021-05-07 19:34:14
58
4
c4facee5b8bdcb71ad41e600c454bb96a26fb4ab0888285e7182be1ed997b157

Rule Matches per Month (last 24 months)