EXPL_JNDI_Exploit_Patterns_Dec21_1

Rule Info

Score
70
Name
EXPL_JNDI_Exploit_Patterns_Dec21_1
Description
Detects JNDI Exploit Kit patterns in files
Av Ratio
9.09
Author
Florian Roth
Tags
['DEMO', 'EXPLOIT']
Rule Hash
80eec73480cf67a027f5ef7521bdc2a7
Minimum Yara
1.7
Date
2021-12-12
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
12
Suspicious (< 10 engines)
27
Clean (0 engines)
20

Rule Matches

Positives
Hash
Total
Timestamp
VT
1
8a03946b8605d375cb062d4ed4c02bd218b8094a55458842d69f3c9d88703563
56
2022-01-23 13:56:19
1
657597acb38eafb754a012dc2dbbdc32259949d187fd8ef556dd87dd7be90cf8
57
2022-01-20 00:45:00
2
5756b7c922ce633f1ae00b404f58e8a565bfa99db7e95b1a5fae0065dd005a8d
56
2022-01-19 05:06:31
0
7ce997d61e802fb55a57b833746dc6b5605c49fb05d19846f48e800d3a221706
57
2022-01-17 10:34:37
1
2dc9fa8d1a749ca1dfc34896dcd3ff69e7021c22b8b1de2a09f7b6adeef8bb40
56
2022-01-16 19:04:45
0
3f2972e7bc64908db29524a2a04c8456058ba28aba6e098104c45a0d6934e0ea
57
2021-12-31 15:12:21
0
83b1f868940a46ee17cbc47ec8461ecd9b85c1951403d5ae43c9ac46631eb2ec
57
2021-12-31 15:12:21
0
eec28fc801f021adf5f56fe037c6d7d84ad002c0aeba4976d2a2a9b658ccd019
52
2021-12-31 15:12:04
2
3762cf5d64d7d7b27a5d7345401f3ccb7ad4955629ffe79a738372a00880ead1
56
2021-12-28 11:27:42
0
ac46725d732f453d039dba13f410be7016750621551d4e57a2d5b769aebe3191
56
2021-12-24 13:11:15
0
2dd5d4ad8df5b43a035bb9627bb310669b02f019d13a5e7d82011f76cf12eb49
39
2021-12-23 03:20:02
9
a2f8c3878f0af9cfc0e2278aebd71df4a6019cdf5692b7cf7f9b89c4d9160276
57
2021-12-23 03:17:47
2
3c63c0d5e4f5505a319292ebf18c3842dee83e9f42d931a4fab7ac044c1035cb
56
2021-12-21 18:24:04
3
094da9fb31b753ed07a99720ee6b251f0d0034ae633f81bb21613f0f9f944d70
57
2021-12-21 09:48:17
0
d50fbe7077b1d3f507fea8defe7563791ca37efd6e802d632169a049a90e8994
55
2021-12-21 03:17:37
4
e7c7a9c258d952dea928a3624c38ea37f1599b82d39d3c7360b804fc13130084
58
2021-12-20 13:13:30
3
f287df5a5375c3e347f25b840098d6e1d74cb8da1eea16760ab928831f4a4ca1
66
2021-12-19 10:39:17
18
17f785b1d881ff3c7151fae977bcbf2c71b868ff57abf2780d5e69f560fb7a7b
62
2021-12-18 08:53:26
3
61ab2c219f73e7bf5a122cc4563a9efe3cfd5d99309d05a2ae5e53795a9531ac
67
2021-12-17 22:05:52
3
aa4551a48c8b23741413ed7bced7bd87fb45838ee2e87d750ca6053158bc814a
67
2021-12-17 21:20:08
0
d2b19912ad8bda4605d54013052eedd4520b8f4a6e10c98906efac512a75c17a
61
2021-12-17 16:45:41
1
6245e1ac4150602a46b67420b44fae3c475a8392dc663f17c3711aa39aaba834
56
2021-12-17 11:14:51
26
3acc3088be26262923510cd87916a36c9ae4b28182cb5053c8702cd95f97ea54
60
2021-12-17 10:58:52
24
9bbe681c3c4be5b3c371da145de98e94983da47688268415ae1791cb3a85cb96
61
2021-12-17 10:58:52
15
602ce22d44a429d4fb5199b09502c39a2c5f84653d27fdac167d92408c5e5e8c
60
2021-12-17 10:58:52
17
01d53048f0316d6928ecf54b2ef576dc645b3b7b0d23aa7d60345ab06b3e0cea
55
2021-12-17 10:58:51
25
e969c878334bf0af177cd2be2c43377327164c6d085e1071d09ba6c8505f75f5
61
2021-12-17 10:58:51
25
12de06b32dbb246bc033ce25738354d6336874c8969b480aac36fe5607d9bcd1
61
2021-12-17 10:57:49
14
2c76ad86ef6e62403d5a3e522ddd6b681139b4c9f1fb683ce0aeb44121c8ea45
56
2021-12-17 09:42:17
3
4957ba9d7d1c3f59943fe5841fefd496c7c725912edea7f3a765f1c4da56691d
65
2021-12-17 08:05:03
23
5bfbb3d4505918b3e1d95bf1e2123a21abf5ffdc35801823cacfb9d44fc84aa6
61
2021-12-17 04:03:44
0
2a5dd40d9759336bdea06a54ae4bc31b315ecacba0d2f850dd47951927b7a6c9
59
2021-12-17 03:18:37
1
21ec72b4830bc735edd419cbf65e7a0019035b9d3fd89571232b3b75f301e577
58
2021-12-17 03:18:37
25
105a12429011b7041862ae26ab6f79610e8144b13a70f1ecb22bfc0ac8641afe
61
2021-12-16 23:53:53
20
2da8510ac4fea01dab7a702de7d25a41147bba6624d2459ea5ce8367248b5e28
58
2021-12-16 23:12:21
21
5f0db9a4d16ae13ee931a52e8ef5e8461b2c1ac2b78226002036b16227122e74
62
2021-12-16 22:07:43
2
c838ab11b66d03d5ae6831a2a5548f695214253da3a7cf26bf2204b2300c7463
63
2021-12-16 18:18:33
3
bf8d19b107c97c87848a76f58606d570e6b515f9f10dd77a4f83654afd02e70c
53
2021-12-16 17:22:48
0
f32e675d011bff435f224203e226302ae0297c0bcaa30657b19e096d501944fd
58
2021-12-16 10:05:59
0
8f808f3f636c486197e9c4e3243091d3cb52d86cbe81a2888c08d5755e121cd2
57
2021-12-16 04:44:46
2
caee62557f914d5346fb358d61f29cf2c973f6e44c4fd9946a636875c85274a4
58
2021-12-15 18:31:35
2
38a432e6e16430ab03b7a345904b3ffbdf75fb48fa94d835211f83b5454ae0d1
58
2021-12-15 18:24:46
0
2594e824e6dc5be478c434f85573e492ec283c5a2eb78d9615044034517bc3cb
56
2021-12-15 11:56:37
2
1b7d6def1dd599f61b7b0d225bafb911ca850805628e418dfd0c5193016911a7
56
2021-12-14 20:11:07
2
3d138afd0676f62db6b30010f1f7abcca20b7d3d1323654c7aa864b49ebbb98b
58
2021-12-14 19:25:29
2
2abf4856594569dddc9cc1405758d0fe67dd3e62249476a3ac5311afb65a823d
58
2021-12-14 19:24:17
0
65e1ed73651cc83d711b9832d7c162659bbf71a343038e094667983b29014243
57
2021-12-14 17:09:34
0
0a0663e32f9a9c5e1bb7d4bc75bd50325fedfb5786d41fb2ca3cbe362c77b321
56
2021-12-14 10:54:55
2
0f6eaec34516e9645410d704dd6accaa381dd23ac2aba3801e208f59d296923a
57
2021-12-14 10:28:00
0
171cd4bb38157ca2a9c7e6457a1fecf4bc72196ad53b3c1299b50e1a1a5d7daa
57
2021-12-14 03:33:09
1
2780737e9937864f6b006c1f47ab390e76207111616ede87cc189777103e470d
56
2021-12-13 19:30:40
0
ce06ed30774e245c4eead6b62e4a173c886a87b7d8b9fe7ba5d7c4b0b72fe08e
58
2021-12-13 14:52:20
0
83c96295a76b77cda82b74ba97c33db8f03965cd5f1025dc623b764322d2edd1
57
2021-12-13 13:12:40
0
020628fd94530a28e53d715a4dd5b6e2ebee66694a52522568a99b5860b8b73c
58
2021-12-13 12:30:24
0
6b5b251a8ccc3892eb6838b4af44924aaabb99181e95f7e175472b788cac7404
56
2021-12-13 08:28:42
7
e1c46ec8b9f8c57d3d193379849d84fca73dcc4684bf1397ae129b6c8d811529
57
2021-12-13 07:26:07
0
a939b1db7a329a41dc80282f57a6f99d71a6086655ffdca25917a80a2f2bc9a2
56
2021-12-13 07:17:22
1
332b6dc17abf9ad6ef9860db7139dc1d481f8d4091ee001c94e79ec42ab9792c
56
2021-12-13 07:15:00
2
464dc763c817efdd80f93da98eaa45a3feb667d63902735301490461ee41c279
61
2021-12-12 22:49:17

Rule Matches per Month (last 24 months)