EXPL_JNDI_Exploit_Patterns_Dec21_1

Rule Info

Av Ratio
9.22
Score
70
Name
EXPL_JNDI_Exploit_Patterns_Dec21_1
Minimum Yara
1.7
Required Modules
[]
Description
Detects JNDI Exploit Kit patterns in files
Date
2021-12-12
Tags
['EXPLOIT', 'DEMO']
Rule Hash
80eec73480cf67a027f5ef7521bdc2a7
Author
Florian Roth

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
18
Suspicious (< 10 engines)
38
Clean (0 engines)
35

Rule Matches

Positives
Hash
Total
Timestamp
VT
1
397ab1d688093f8bb4867b68222bef9d1f9a17c10918b725f512aa8153bb200a
55
2022-06-13 19:09:14
1
9b5b2715e1077cf3a681c502604813734f98f1735c0e9a6208dcc61bbdeb87a2
57
2022-05-26 23:23:43
0
63c6896670afc682fd8b63e943c9060496e72e28b01e0cac23af261a2d1873c8
56
2022-05-26 21:58:10
0
fc23b8edfabed85675f09c5523d9158e0f949e191c1c3ec5782807ffcb232f4b
57
2022-05-26 09:02:26
5
35b8d1371352cbf3569f33c62128f15b83880ad5ba4322dc937edcc824a2c1da
57
2022-05-26 07:06:29
3
45e4d666445e600305aabceb2e341d592bd931e20fe0d9bf661d7856ef02f544
57
2022-05-26 06:12:41
0
d3713650d9441783e737d81a4dfdc55f03354b35a4988cd419ee563cbd9e57a4
58
2022-05-17 11:31:16
3
91b143d9cf2388b8ce1c558d40de7ffc8c9567c323962feff2e4957c69f3f32f
56
2022-05-16 22:01:23
0
86f158225c3d0ddea14bffec2124bec014b00ad4c428acbacc247741dcd52f85
58
2022-05-12 12:18:44
0
93dbcda93b55903297e004cebdc5ca1df3054c1abbff28737b24e823bb7b089c
58
2022-04-26 09:06:59
0
66d920cc93b82bcfdbc382401b95a68bfde5641f43bb25caf350aeb1fa114283
57
2022-04-25 21:59:21
35
73e929575afc04758a23c027ebe4f60ab5c4ba0ab7fa8756b27ed71548302009
61
2022-04-14 08:12:08
1
b3163f0a1fbbb12567ce2ad58240c0ed7d3aee2ebadfa86e65fd8559f959a09c
58
2022-04-12 20:29:36
0
2ea850eaad9bc2f0fe597ce8bb16f176bd32c23e8bf52d786357f46ff301c25c
57
2022-04-09 14:52:41
0
24800329ea4975f554aed1ee822e16a461ae209a36375c8f2cf2fef2a1029791
56
2022-04-08 16:06:09
0
a045dab146973316619abb05d9e9e909019092a72010cf059aab3f2258bea75a
57
2022-04-08 13:31:26
0
3252c162b5c9a6f7e0224ac2253540708dcf493b8bd5568b45131437761f94ff
56
2022-04-08 07:35:22
0
d32ea56931f7038df386474b19392728d51c14d8a4f31e30bd2e869e909a4dc3
57
2022-04-01 23:06:50
30
ef9c607b8126ef40a63ea9379ce874d1098a493ed799096327d34bc56817f5a9
60
2022-04-01 06:40:37
34
f2ac1bca47fa006306e44dbc4f4645daae3cfff2d68b6124fa4d0ac6321c70bc
61
2022-04-01 06:40:33
1
17936e70307972295bb8e9609bfc9d86ee83fc20e4e81bf19baf5a0ea85a292f
57
2022-03-30 10:07:39
1
61edadf87012c548afe8ed384d70797f7738443508eac740d5812be65169bd86
53
2022-03-29 11:24:25
9
806fae5dcbcdba323f0170b954a132fd9e42619232b500e0f6ee923bed7fe6c1
58
2022-03-29 10:52:42
0
c9478015f13863e57635fac5bf559cae3332e7024cfcc45d031eaad56c7b62a3
57
2022-03-28 18:17:15
0
5b2c04c23fcf0b0a0e8ac9077ba2452d1594e862abf73173a8be95fc54132acf
56
2022-03-23 09:44:36
1
254fb732e53d28b4177c247f7548132d6983ab95b9192ec6ef2084e2543db0a1
56
2022-03-23 09:38:10
21
568e992573c17f20929131aef186fd7b5bc3cf33e14db2f1928bf975abbe706b
60
2022-03-18 06:01:06
10
d09222c19a6115b9a46adedf69ce4764904ca20de56acfc7fa10a92d75a45c8d
56
2022-03-08 21:29:24
0
da3e9e5f35f966c5cc3fef913384493ad514730055a0f4b5ac7dc45177dccaea
56
2022-03-07 22:24:04
1
77bdc50c116d9d40ba3d55d85c8e4a8cbc2a739b81d4079bf492c8044be8a691
57
2022-02-28 08:55:47
25
d32078716f1fc1d30f0c598f302321e94fa3ca229333403d888cd17c22449812
63
2022-02-12 08:21:46
0
7da6da7a225ddb9707da2435ddb4154342aab22a80957c60e1eb22b5f280fba1
56
2022-01-24 06:48:02
1
8a03946b8605d375cb062d4ed4c02bd218b8094a55458842d69f3c9d88703563
56
2022-01-23 13:56:19
1
657597acb38eafb754a012dc2dbbdc32259949d187fd8ef556dd87dd7be90cf8
57
2022-01-20 00:45:00
2
5756b7c922ce633f1ae00b404f58e8a565bfa99db7e95b1a5fae0065dd005a8d
56
2022-01-19 05:06:31
0
7ce997d61e802fb55a57b833746dc6b5605c49fb05d19846f48e800d3a221706
57
2022-01-17 10:34:37
1
2dc9fa8d1a749ca1dfc34896dcd3ff69e7021c22b8b1de2a09f7b6adeef8bb40
56
2022-01-16 19:04:45
0
3f2972e7bc64908db29524a2a04c8456058ba28aba6e098104c45a0d6934e0ea
57
2021-12-31 15:12:21
0
83b1f868940a46ee17cbc47ec8461ecd9b85c1951403d5ae43c9ac46631eb2ec
57
2021-12-31 15:12:21
0
eec28fc801f021adf5f56fe037c6d7d84ad002c0aeba4976d2a2a9b658ccd019
52
2021-12-31 15:12:04
2
3762cf5d64d7d7b27a5d7345401f3ccb7ad4955629ffe79a738372a00880ead1
56
2021-12-28 11:27:42
0
ac46725d732f453d039dba13f410be7016750621551d4e57a2d5b769aebe3191
56
2021-12-24 13:11:15
0
2dd5d4ad8df5b43a035bb9627bb310669b02f019d13a5e7d82011f76cf12eb49
39
2021-12-23 03:20:02
9
a2f8c3878f0af9cfc0e2278aebd71df4a6019cdf5692b7cf7f9b89c4d9160276
57
2021-12-23 03:17:47
2
3c63c0d5e4f5505a319292ebf18c3842dee83e9f42d931a4fab7ac044c1035cb
56
2021-12-21 18:24:04
3
094da9fb31b753ed07a99720ee6b251f0d0034ae633f81bb21613f0f9f944d70
57
2021-12-21 09:48:17
0
d50fbe7077b1d3f507fea8defe7563791ca37efd6e802d632169a049a90e8994
55
2021-12-21 03:17:37
4
e7c7a9c258d952dea928a3624c38ea37f1599b82d39d3c7360b804fc13130084
58
2021-12-20 13:13:30
3
f287df5a5375c3e347f25b840098d6e1d74cb8da1eea16760ab928831f4a4ca1
66
2021-12-19 10:39:17
18
17f785b1d881ff3c7151fae977bcbf2c71b868ff57abf2780d5e69f560fb7a7b
62
2021-12-18 08:53:26
3
61ab2c219f73e7bf5a122cc4563a9efe3cfd5d99309d05a2ae5e53795a9531ac
67
2021-12-17 22:05:52
3
aa4551a48c8b23741413ed7bced7bd87fb45838ee2e87d750ca6053158bc814a
67
2021-12-17 21:20:08
0
d2b19912ad8bda4605d54013052eedd4520b8f4a6e10c98906efac512a75c17a
61
2021-12-17 16:45:41
1
6245e1ac4150602a46b67420b44fae3c475a8392dc663f17c3711aa39aaba834
56
2021-12-17 11:14:51
26
3acc3088be26262923510cd87916a36c9ae4b28182cb5053c8702cd95f97ea54
60
2021-12-17 10:58:52
24
9bbe681c3c4be5b3c371da145de98e94983da47688268415ae1791cb3a85cb96
61
2021-12-17 10:58:52
15
602ce22d44a429d4fb5199b09502c39a2c5f84653d27fdac167d92408c5e5e8c
60
2021-12-17 10:58:52
17
01d53048f0316d6928ecf54b2ef576dc645b3b7b0d23aa7d60345ab06b3e0cea
55
2021-12-17 10:58:51
25
e969c878334bf0af177cd2be2c43377327164c6d085e1071d09ba6c8505f75f5
61
2021-12-17 10:58:51
25
12de06b32dbb246bc033ce25738354d6336874c8969b480aac36fe5607d9bcd1
61
2021-12-17 10:57:49
14
2c76ad86ef6e62403d5a3e522ddd6b681139b4c9f1fb683ce0aeb44121c8ea45
56
2021-12-17 09:42:17
3
4957ba9d7d1c3f59943fe5841fefd496c7c725912edea7f3a765f1c4da56691d
65
2021-12-17 08:05:03
23
5bfbb3d4505918b3e1d95bf1e2123a21abf5ffdc35801823cacfb9d44fc84aa6
61
2021-12-17 04:03:44
0
2a5dd40d9759336bdea06a54ae4bc31b315ecacba0d2f850dd47951927b7a6c9
59
2021-12-17 03:18:37
1
21ec72b4830bc735edd419cbf65e7a0019035b9d3fd89571232b3b75f301e577
58
2021-12-17 03:18:37
25
105a12429011b7041862ae26ab6f79610e8144b13a70f1ecb22bfc0ac8641afe
61
2021-12-16 23:53:53
20
2da8510ac4fea01dab7a702de7d25a41147bba6624d2459ea5ce8367248b5e28
58
2021-12-16 23:12:21
21
5f0db9a4d16ae13ee931a52e8ef5e8461b2c1ac2b78226002036b16227122e74
62
2021-12-16 22:07:43
2
c838ab11b66d03d5ae6831a2a5548f695214253da3a7cf26bf2204b2300c7463
63
2021-12-16 18:18:33
3
bf8d19b107c97c87848a76f58606d570e6b515f9f10dd77a4f83654afd02e70c
53
2021-12-16 17:22:48
0
f32e675d011bff435f224203e226302ae0297c0bcaa30657b19e096d501944fd
58
2021-12-16 10:05:59
0
8f808f3f636c486197e9c4e3243091d3cb52d86cbe81a2888c08d5755e121cd2
57
2021-12-16 04:44:46
2
caee62557f914d5346fb358d61f29cf2c973f6e44c4fd9946a636875c85274a4
58
2021-12-15 18:31:35
2
38a432e6e16430ab03b7a345904b3ffbdf75fb48fa94d835211f83b5454ae0d1
58
2021-12-15 18:24:46
0
2594e824e6dc5be478c434f85573e492ec283c5a2eb78d9615044034517bc3cb
56
2021-12-15 11:56:37
2
1b7d6def1dd599f61b7b0d225bafb911ca850805628e418dfd0c5193016911a7
56
2021-12-14 20:11:07
2
3d138afd0676f62db6b30010f1f7abcca20b7d3d1323654c7aa864b49ebbb98b
58
2021-12-14 19:25:29
2
2abf4856594569dddc9cc1405758d0fe67dd3e62249476a3ac5311afb65a823d
58
2021-12-14 19:24:17
0
65e1ed73651cc83d711b9832d7c162659bbf71a343038e094667983b29014243
57
2021-12-14 17:09:34
0
0a0663e32f9a9c5e1bb7d4bc75bd50325fedfb5786d41fb2ca3cbe362c77b321
56
2021-12-14 10:54:55
2
0f6eaec34516e9645410d704dd6accaa381dd23ac2aba3801e208f59d296923a
57
2021-12-14 10:28:00
0
171cd4bb38157ca2a9c7e6457a1fecf4bc72196ad53b3c1299b50e1a1a5d7daa
57
2021-12-14 03:33:09
1
2780737e9937864f6b006c1f47ab390e76207111616ede87cc189777103e470d
56
2021-12-13 19:30:40
0
ce06ed30774e245c4eead6b62e4a173c886a87b7d8b9fe7ba5d7c4b0b72fe08e
58
2021-12-13 14:52:20
0
83c96295a76b77cda82b74ba97c33db8f03965cd5f1025dc623b764322d2edd1
57
2021-12-13 13:12:40
0
020628fd94530a28e53d715a4dd5b6e2ebee66694a52522568a99b5860b8b73c
58
2021-12-13 12:30:24
0
6b5b251a8ccc3892eb6838b4af44924aaabb99181e95f7e175472b788cac7404
56
2021-12-13 08:28:42
7
e1c46ec8b9f8c57d3d193379849d84fca73dcc4684bf1397ae129b6c8d811529
57
2021-12-13 07:26:07
0
a939b1db7a329a41dc80282f57a6f99d71a6086655ffdca25917a80a2f2bc9a2
56
2021-12-13 07:17:22
1
332b6dc17abf9ad6ef9860db7139dc1d481f8d4091ee001c94e79ec42ab9792c
56
2021-12-13 07:15:00
2
464dc763c817efdd80f93da98eaa45a3feb667d63902735301490461ee41c279
61
2021-12-12 22:49:17

Rule Matches per Month (last 24 months)