EXPL_Log4j_CallBackDomain_IOCs_Dec21_1

Rule Info

Description
Detects IOCs found in Log4Shell incidents that indicate exploitation attempts of CVE-2021-44228
Score
60
Date
2021-12-12
Minimum Yara
2.2.0
Name
EXPL_Log4j_CallBackDomain_IOCs_Dec21_1
Required Modules
[]
Author
Florian Roth
Rule Hash
790752dafd8f11b3356865e224d9b7e8
Tags
['CVE_2021_44228', 'EXPLOIT', 'FILE', 'DEMO']

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
5
Suspicious (< 10 engines)
91
Clean (0 engines)
56

Rule Matches

Hash
Timestamp
Positives
Total
VT
99c12efc68206a94d588d2e54d298de765ea44dea037a7bef215445a0f6d43dd
2023-02-05 07:33:38
1
60
8629c1f53dba7241ce20ac650e12196aea5cf06d177fcd5c54f8f83ef78d0bd2
2023-02-04 18:10:50
0
60
640eb28d6221886e0037d24150f331d7a49936e01529cc69effc4e32513cd322
2023-02-02 02:31:04
0
60
dca0c82f97745e01d958f082d90152a3a3eb431f67ce76457c74d079822f3291
2023-01-17 10:10:40
0
63
6e78e5e5b1519f3f35ddc69ca40d648b6e98e584c635e3cd1f1f6a9cf7f00e4c
2023-01-12 17:02:19
0
60
8fcae78dc3e8867c06c3c76f7aed0044cb0f788dee8b65d0255984deaffb4166
2023-01-05 07:08:17
3
60
f9ab4a37b9dc8e2c4606454dc7ce3810084081ee086b35c879f3e298aaeab0ea
2023-01-04 12:09:58
3
61
2987a7496fba6fe83bbe319bc80b82bdccb02732f5f673382ffaf78fdc697381
2023-01-01 18:28:56
2
60
dd8c4912a7e0d087324c3674fcd68e18eabccd1723555656fc2b0ee372e6b9f3
2022-12-24 19:47:30
1
60
0ed6e7c03d82a336bb8697e324eb8209e694236abebfdb177c4a3d25b54b7b6c
2022-12-12 11:53:22
0
60
07a4369908e569cd52ab79dca96c4766d51e401c7241ed2e9f7e54f5ecc9b6ae
2022-12-12 11:53:10
1
53
091d9790057cf9d955ce27c8f9697cd063ef26725a47e922ce911576cae68f56
2022-12-12 11:51:36
0
61
8c7d5b3e021edd123ef11cd0438edd23d8aa84c1796faf986817ca17012d393b
2022-12-12 11:51:06
0
60
11f444b46f245918bfb5ec055a9eccd59654d37bdc1433d61b5ddb9aa8196ebd
2022-12-12 11:50:57
1
65
47a9850eb580cb6a651c0da39187c780d69c94b7c85b132e2b8f4ccc386ab198
2022-12-09 14:23:12
1
64
4a6afec37dd514523f0cc8a66eced9e902fe7730ceeef6618c6abed65028031c
2022-12-08 20:27:01
0
61
818e3f6e782eb4f09b12f88308f24a47b12b91bbe747f3df5a05610e15b248d4
2022-12-06 13:16:27
0
61
8d56caa364cce1d8a23f7c560f9f9887b8f0e6075deabcc5e64938275ef5aec9
2022-11-29 11:44:46
1
61
a21caa0be83963beea346a2a191fcc8718f4a0c49e5070d8bcad2faa39d9d907
2022-11-28 00:07:08
3
61
57e6d3fb22f76323d7e4889cd0da24b6b54a2bfd8a820e9418b13f3d1c3812c9
2022-11-24 15:43:15
1
61
1b1a1b532923cf69c197f16e08a2c86e9aa56ac430b1f79c75debc49bfbe22e6
2022-11-24 09:37:29
1
61
b665ce90eae06b8d1bc6513a9441db6f5b7e9825d3462a8f692c019f035d6131
2022-11-19 20:29:48
1
61
9b19ec862725a2e478863c41e4c033ca4c04596a324f25b0985d2bfb5fb5066c
2022-11-18 19:49:11
1
61
948b90a5c89956c6fe2ed36e59af12575d185a4af70841c6546d7ba28bb4f56f
2022-11-18 03:16:18
1
60
ee98da38fa1ebc7e429771d06aa276223c6b59b236de97d348d66e49826b0dae
2022-11-14 13:57:57
1
61
51c2141bb46c09a9346dbe7f3b03a2c3ff534902d0ef8243b109146c8e765199
2022-11-14 03:11:33
3
61
102178785992e0e197db540ce4b0a8272dbf562d660b5a31e3a55c356de00899
2022-11-09 04:17:06
2
60
f5394b68e965b09576eee2a7fd19f688b11aa31b8733ed028fc7b40282210800
2022-11-09 03:10:57
2
59
da19c710e7a131d8d3114033df0e8491ab9d40f9ccbb8a1cbd4bfd4a045a9cc8
2022-11-09 02:14:26
3
61
1f0fa09db0d60ebed5d2aa1ca7b550a4e2f762a2a875e2dac1203ef971d63841
2022-11-07 18:07:53
0
61
b539e00ffe9cfbd00018ff9a415afc2f72f7ee5b7b0ddad856a2b226cfe88dd2
2022-11-05 04:20:26
3
61
2d4224447213b56a6bea5524e7228674e29836b9ca8ae305197f649e0a00ec3e
2022-11-05 02:08:58
3
59
22154bb5dc8fda8a1e9f6375f3ef939f67da28e506dcaf1fddd833a8ccec3999
2022-11-05 01:01:33
3
61
86c5ae16f913f0f9e91c0347f736157c9afde6e626203a71fe1486c4b39c8cca
2022-11-04 01:49:50
2
60
ff8e74bc651b29bd2dd3ca85750d5911433dc8e56707d19e770eb0342a44f9cb
2022-11-03 03:42:05
1
61
4a402bdcad91dd8ece840a6a508de6c395641a60066caa943b67b3d138a12507
2022-11-02 12:21:28
0
60
4ffe04f6a8b129ef01cb577f45f171d88dcc35fdf61c3e6aa5d84cabc4577cfc
2022-11-02 03:22:09
5
61
23c18cd076d9b7a40b47754d77c84cbf4836e96e65d05696f3221eb1fc6bfadc
2022-11-01 01:00:03
6
61
9cc50d9954af8e736e6e3caa9a9407a1274625ae859fed333a4f2720408f282e
2022-10-29 02:44:47
4
61
a1401cf7e1a087b801f675fdc01c9f6abed3db6c2ba1fa8d7efb5af4dd085c8a
2022-10-27 07:13:27
3
60
9890859a90a5139d324cbce4e458d6e9ba29250a007960bb550c60edda966851
2022-10-27 04:15:48
4
61
ec13d4f8069872746e4eae55450d35eb46b65654963ec9b405715d17aeb4e1ef
2022-10-24 09:01:21
1
60
3d5b9088a4068e203246be89d2b751ca82cdc6fb450029f9e8ae6aceda3f962b
2022-10-24 08:58:09
1
60
281d435a6cef0db762c3946e78a1b1e042668011c7f9993e646e265944993afb
2022-10-23 02:26:54
3
60
8189070215071343a41a8bbd0ab9b1506fcf241b4b3cb544f0e81a33fe17f6e6
2022-10-23 02:26:48
3
60
ce7d7f4d9a03604ea4dc6d0a750e50188a95d1fde4cab83fe00575eb27954d16
2022-10-21 14:03:49
0
61
d3d53d3554c5d46754bad73990a1626512a8a7ed5abeda313698926631ff82b3
2022-10-17 17:18:03
1
61
6d26f8139fc5852a0bc9b7a52f04580d813c49a0b26c2090b29aa0fff9cd599b
2022-10-03 12:53:42
0
59
54c090c18853b2ae7fe57709180be70c77c061b846d75112068f092e8e311683
2022-10-03 07:27:49
11
59
8ea0c73ff2a3cea0154553d7ba4172fa3ca328fc6f66e1c166ec0d9148ec006d
2022-09-27 13:24:29
1
60
57eb43274cce053a0b510edff9b92c4cb483dc47deb6fb163296d67debcda3cb
2022-09-23 15:30:57
0
60
d8c5d5c933085df6af281dc528fe3991c361263b10147e014b6794d92d717cda
2022-09-19 11:09:45
0
62
f1a01e3d8430e84e0021b90d68c9e2b2aaae58acedcf7088f57a954a976c6692
2022-09-19 03:16:02
1
59
840c3572dace69ef15ccccec2c857206877fa0a887dd4952fd4367a30daf36e5
2022-09-18 15:06:53
1
59
399aa7f372744ba08b42c047c14b5212e642f8f5eec3179346446dfe3741f56d
2022-09-13 10:08:55
0
59
68aae3ef154507e48e157243b7a58923310774be257efcdd023c5c8d0926b5b5
2022-09-12 22:09:22
0
59
64bacb60978c29df1d2e3bb6b02df6efbbcbd2f9aa3e4960e583c389f7c7c295
2022-08-30 17:20:07
3
51
be198fa8fc602e5c1c88f74adfa67df7ba009543f701928146cf117eae9ff225
2022-08-25 07:15:40
1
59
de6404b82d144619d1d18c0d14f85cffe50d2ef6945287325be731f896aaadc5
2022-08-24 03:07:58
4
59
ac3b139dafadec67d8ef5eed5226be8054f0ba8338f9b04b64defd2c504e6085
2022-06-17 06:12:26
2
56
7eb04d01a531400161d34ee90a68516f5de89e88453bdbe902a5ef93d6640324
2022-06-16 23:19:05
2
56
69fb39a428314953ff609eeac9806ecdcfee005220a609315b8cec44625bfd03
2022-06-16 19:55:25
2
56
639880b8d611e3f7026345da960a00912c842cea410d4b1c0b4b460b8758e881
2022-06-16 15:50:12
2
54
1ed5be5d8c19de4165f30da70fcaf3a12916427318e68b647b627dc8d8153d2c
2022-06-15 11:08:12
0
55
b1e189573b8c34f327a9e08609d067cda81a71263959dae948d2d50ecb6ccdf0
2022-06-15 11:08:06
0
56
397ab1d688093f8bb4867b68222bef9d1f9a17c10918b725f512aa8153bb200a
2022-06-13 19:09:14
1
55
928b3ade412d3525700771e1854edec11bbd7825aea2f0baadd6a892a13ea981
2022-06-12 17:19:55
2
56
d197fef4f3422c319950dd7a9d87b6793a2454c4abb346d553a73c72ebbc08bb
2022-06-12 08:48:51
2
56
aa343f6a41fb1683cba785dd7933568d845e37c065f2ad1d21291d2558179405
2022-06-12 04:22:08
2
56
2fbe9a5f21c450ad59bddb01795674440ee66fc802a5da3858137d8fc9e9da5d
2022-06-11 04:13:12
2
56
91a3772a5285fd141f8e464d9a10eceedd06537c85d61e32993e6e949c858fa2
2022-06-11 03:47:56
2
56
1f73c09245510f5c17ec58a370512931756f220723ff74ac18d843cf5a2fad00
2022-06-11 02:23:06
2
56
466d0a403553251ed6440afb46e721f072bbdb5968f4eef51d9a92742b72ea51
2022-06-11 02:21:51
2
55
e49ba479207679c2065ddd41ee070b7af6a27ab0831c1fed56d39eed6dee6f70
2022-06-10 22:50:18
2
55
a570be887ce616a9b5e50e9865fba3efdce3828927f9fb2d1523f68bd7fcbfe3
2022-06-10 22:41:28
2
55
0257584cd0d3bdd0b637f16503c12fda9aa845f68a5ef875fea4c0b219ee52fd
2022-06-10 22:06:07
2
56
b59d81ea197a3e369080aff21d2e06d854defd0052c8f86e90b4f90dab7e3682
2022-06-10 21:57:39
2
56
f63ec63fd69a16c2fd6b3a1ebe90ae452a651301b26546723f1f79a343258d45
2022-06-10 18:42:07
2
56
98b4a28229c47bf32480c9e9daf632138965144a71f6f25b51fc4eda2f8cedba
2022-06-10 17:20:53
2
56
5328fa23f5882d65fc4acb8f824e7346f15d431812ef8c421a4cd4074ef8c135
2022-06-09 12:09:43
2
56
c7d101977f80fe219795cac1be1a0c84f68fec3b6eae5090fba701668f140abc
2022-06-09 00:55:39
2
56
01ba6a0b72911e810b5053fa23f49da21cbb4bd1f8eb894325b826e4fda49b12
2022-06-09 00:55:38
2
55
5d49853b8e7dffbc00a7ebbc7fbb0ab69d28409a1f5ae4931fbeaa4b5a276673
2022-06-08 19:17:00
2
56
1e4b8e445953459c0699853e4f17a9acc29f9a78c059aa0ffb8dcd847df81b48
2022-06-08 19:15:36
2
55
b7bd4cbe440c7c4326370a9ddca561886daa0f29bbd0d7ffc39baa3549984fbb
2022-06-08 15:49:01
2
55
7890cbd0dcc3c92ac97338e054c1205cdb43a059a039428c4b745f438f260295
2022-06-08 11:48:25
2
54
a49a49579d8e8322edd8ad0ee00c36480582e698bbe3d3d69d349a4d5752175f
2022-06-08 09:13:34
2
56
88e1b0b16f6306fb1a7da1f5a059beca9ae8bcba3494775180be398c16dadec1
2022-06-06 21:13:09
4
56
e6166da726b5a6d87f1acdaff30cc9a25527be7f231eb3615ffe72cd2a2bc4ad
2022-06-02 13:17:10
2
57
2aa19f41a2ec845e7a7994df63d58183367ae9bb22e51ab9bc0015466b94765e
2022-05-31 03:24:08
0
57
35b8d1371352cbf3569f33c62128f15b83880ad5ba4322dc937edcc824a2c1da
2022-05-26 07:06:30
5
57
45e4d666445e600305aabceb2e341d592bd931e20fe0d9bf661d7856ef02f544
2022-05-26 06:12:41
3
57
5581c131604d1f40b8f7be241327a3912ad21fd18c4fc8e0d96e08c035d1f437
2022-05-24 17:33:26
12
57
247c37a4dd686724b96afea8fe483692014ef357ce04c78eec345a936b760aa2
2022-05-17 12:15:54
0
57
8925dfb0fda52b019a94c54d8b2a219d1d054fbcc924be81a4f1f3018f08d7dd
2022-05-16 10:16:59
1
49
4b636207b7170f34971adb65f465a4211ea07545896ccc996e3609ea1796b50e
2022-05-11 11:10:11
0
58
d780b3e8629186d781e95399b40fcac0ac7f152376f9613ad7809451996481d6
2022-05-04 09:20:33
0
57
b3163f0a1fbbb12567ce2ad58240c0ed7d3aee2ebadfa86e65fd8559f959a09c
2022-04-12 20:29:42
1
58
e1973fe8d87fe89ea1980779a3d7aa5a40e3bb8b1a65d3e59b9aebc5b4d40cfc
2022-04-12 13:15:50
1
58
ff485a12c0c67dffe33aecb7241273108a05b8fc64c221dd94100361d81e14ab
2022-04-11 06:42:37
0
58
1d343ad82ac9c6ce05df300a1cf968b08b0edf8a2247331290f82062af67b762
2022-04-01 11:06:30
0
56
c9478015f13863e57635fac5bf559cae3332e7024cfcc45d031eaad56c7b62a3
2022-03-28 18:17:15
0
57
95ec3ea12a01c409774bba91c883b5b5e76e63864d02e60aac93f9b2d8413f79
2022-03-23 06:20:26
0
56
2d6dc041a7826eddb499903ab22720e4ae318347fb28b0acb6e038fcb9886085
2022-03-21 07:37:34
1
56
bc288661fdae0002b266ab41d1c118f386cc24a2293c458c52538adbe9d6a4a2
2022-03-07 01:01:15
1
56
e69b525c418739f5ed03c615e1417693a955c6914561018cdd82d0ca7ba63ff8
2022-03-01 20:35:13
1
58
042078257f6bcdec2025db609d2c43d309db3ae168cb13c2ea2d1cbf79081f2e
2022-02-19 20:13:23
0
56
5a8a29273c752de1556fc179d102ea6e81a28c7c7eff8ee4b5b95c84030fa46e
2022-02-15 17:06:53
0
58
69a3b5f869ba4e7b54e5341c64af044f38e10b68f66bd4472dee48cf2abc1433
2022-01-28 18:19:10
0
56
7acfe4b98bf8d284f93879ca33c923e03ea9d3f5a34a2520596602bb53419d0c
2022-01-14 10:40:21
1
57
cb536c90a751e66d0ad62823089a9254d2dcc9b02ee08cd804586e8c1ba39bf5
2022-01-10 11:46:43
0
57
35b1dc9c8c26c6762c9d163dd54e89427b19558249675d2040941c5fddd5848e
2022-01-09 12:16:29
2
58
0b6944b57703017eac041812086ae5e376820063e418df2e26a1dfe23aefb276
2022-01-07 21:40:16
1
58
93678ac9ce8ca1637e2bac6009702b8b5c278f2cb75f02bc0a41bd1f5addcf3e
2022-01-05 08:31:58
0
55
4c82c0a5e413245a8b28a517a75a277001fd140e5bda258fa6b6f6c91506aa5d
2022-01-03 19:03:28
0
56
d1e8c08e3444b58245337eb435acc8ff22703fe5896f2775d86b5839a9dab6f3
2021-12-31 12:08:35
0
57
9ed63244cc14540fcf9c907ddaaed0d1475668d9476be0b6f580a6bb960881b8
2021-12-30 21:28:04
0
58
48f8feabb0509204eed1ea1ee8b9834a85fc6eb30a647d26437eb82b08fe7beb
2021-12-24 23:44:12
0
58
ac46725d732f453d039dba13f410be7016750621551d4e57a2d5b769aebe3191
2021-12-24 13:11:15
0
56
b6065c7ed17bcf2471a2a72dfce26f0cdff5e4ba7f02b826fb0093cb94e8efea
2021-12-24 13:07:58
0
58
2c9e2437faaa526c00c65ddb0bd2df518196c2fd72ece4f73add5f1b940ec336
2021-12-21 13:10:59
0
58
ef801abe950cf97b8226761028e776135259c83cab63e85a634b288a9dff828b
2021-12-21 13:05:35
0
58
e798ccba97543ada249ba0240cdcc59e23c190d072de9c39ce879fb7907a34f8
2021-12-21 10:17:53
2
51
094da9fb31b753ed07a99720ee6b251f0d0034ae633f81bb21613f0f9f944d70
2021-12-21 09:48:18
3
57
d50fbe7077b1d3f507fea8defe7563791ca37efd6e802d632169a049a90e8994
2021-12-21 03:17:37
0
55
27472ae94cf677c3eebd7047ff78e581c789f1e635a223a5ca5ebbc4ae4bf5b0
2021-12-20 09:44:17
1
57
aabab7a675d314289bdc37cf95c7d368295f6288a596ec42513168704fcc97d1
2021-12-20 08:16:34
0
58
dc819b2567142b5c828a1ee78bd7290cac562ba45a3155a1f215c73151fc7f47
2021-12-19 11:22:17
0
57
dcfe1f489dbbbe6b752ddfb514cc16c8d78b0b210f3ab08713064aa0e3983be3
2021-12-19 10:12:08
0
58
d745f8a2f21ab3abfdb3d44ef5f9873e287e3b71b52b144961a918250182eb89
2021-12-19 09:51:38
0
58
aeb100cc673027fc32f15da25170651a562111460a5741ad06148d00dee26ca7
2021-12-19 07:09:08
0
57
390bc06ffc54eecc28f2d3539e8326b8aa8481e3c589a2768a67505c55d141ba
2021-12-17 19:42:04
0
56
ff8d89415f242cef7b2e49651631f127294decc00334b501b42aa9ee8945c1a0
2021-12-17 18:42:35
0
54
c9decdb3df040f183af7cdec0f61388bef29c031d217df22d81a088727e3c93d
2021-12-17 11:38:28
0
55
2c76ad86ef6e62403d5a3e522ddd6b681139b4c9f1fb683ce0aeb44121c8ea45
2021-12-17 09:42:17
14
56
61c6099cc4895a19dce1f4c49c2dc92a173adce0fa423741fcf6fed70fcc985d
2021-12-16 10:06:12
0
57
f32e675d011bff435f224203e226302ae0297c0bcaa30657b19e096d501944fd
2021-12-16 10:05:59
0
58
8f808f3f636c486197e9c4e3243091d3cb52d86cbe81a2888c08d5755e121cd2
2021-12-16 04:44:46
0
57
5a0df94349e865723ef7f79040aee15e0d166330160926c658b7951f93e4e173
2021-12-15 22:01:18
1
55
19627c3128e3f598b6e79a4c492bb46d61e626278ea7b6346d36a5d62ab37e92
2021-12-15 20:06:02
11
57
227ac5689f6fba53ad2adabc2b46a96dca96db12f66eca13370d2be0f25bf275
2021-12-15 12:44:17
0
57
13d1cbb80ac3e45e924407e737d5f32366b3165d64d5df944881caf09ace4b20
2021-12-15 11:17:40
0
56
0c269d438b712d0d75ffcfc41d30df8d9a7b30659aadba7641f59b3b0db986cb
2021-12-15 07:27:50
3
57
dd73dbc271b3098272d6eddc53c072ab5191c93ff66201fbb19990604bbaa837
2021-12-14 22:37:58
3
66
7cd855e8b671b1df04dde766a99a0791023571d3ab9901433242bc61be3d8809
2021-12-14 21:45:20
3
66
171cd4bb38157ca2a9c7e6457a1fecf4bc72196ad53b3c1299b50e1a1a5d7daa
2021-12-14 03:33:09
0
57
8bd840119a910f1e8cdd02b521037a78d12adf8828ee37d83536c7ef019985bd
2021-12-14 00:28:32
10
55
2780737e9937864f6b006c1f47ab390e76207111616ede87cc189777103e470d
2021-12-13 19:30:40
1
56
963cf06f2b36d514c7b1ae63a59ea98eea844b3ad32b8c78b6afb3619a2f4fa8
2021-12-13 18:01:30
0
57
8ad328025ec82eefb584e7020c9d0c1db3f0e78602c4fe606f5393f638d22aa0
2021-12-13 10:49:08
5
57
609fb5aaf670c5a53dd3f4ffedcb447c8c7fd20aa9f0b7b58077358303a13894
2021-12-13 05:56:54
2
56
4d9ea905cda378e8537bde96c9808602bedc6dd1c42cc5e0a78f02e82f609137
2021-12-13 01:33:48
6
35

Rule Matches per Month (last 24 months)