HKTL_Amsi_DLL_AMSI_Bypass_May21_1

Rule Info

Rule Hash
e05ec3d03082513b33a19f27d10e71ba
Score
70
Required Modules
[]
Minimum Yara
1.7
Av Ratio
0.29
Description
Detects DLLs used in AMSI Bypass methods
Author
Florian Roth
Name
HKTL_Amsi_DLL_AMSI_Bypass_May21_1
Tags
['EXE', 'HKTL', 'FILE']
Date
2021-05-18

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
8
Clean (0 engines)
39

Rule Matches

Total
Hash
Timestamp
Positives
VT
66
62c9fe339e7fd8ecbe9a2f26675ae60f08edc5ada760629de7077b2fe1ff5d9b
2021-07-31 21:09:52
0
68
04a024f334f3027dec5f87b7a915fafeebe4ea0de35f0bee7eb7349e85d396c4
2021-07-31 19:37:09
0
68
944cf9ddb138bc2408a0bde474a58a43d8c3fa08c9a1a3c7b151c038b194659b
2021-07-30 02:17:08
1
68
f4a4e54574c6f96e55538fb7dd776e548b40c6ebccc3ee7548b02eb097dc9df5
2021-07-29 18:05:43
0
66
009181ac8036aec908679391c6e2e31e8a40dcfbaac350a3aac06059d1bb40ea
2021-07-27 10:54:34
0
66
d231370f1723372563c3f7df14597c4365ef4136c987691ac4510841d5ed2bb1
2021-07-27 10:40:56
0
68
1193b611eee01518bb1c82113a9cc6c4e47d6e9197d6253142048b1e62743a1d
2021-07-25 11:07:40
0
64
2611b3dd4101710258f69fe0dd311b3ecb90d6a2c0af7994834b35db7152a377
2021-07-25 10:49:53
0
68
768906ab1519554c8b41661bbbc2112c154e5bf587e9680eb88a3702b52762d9
2021-07-24 22:18:04
0
67
c1c444180bf3c6751794e4fec0cbb5dab533218f8bb50ada37012cd9b26a45fd
2021-07-23 19:49:28
0
67
a16aa1d6d6d6c17eb913970508f26b67bcf7fdb6c3a54db8119551bfbf26dcf7
2021-07-21 19:53:37
0
67
5398d942f99231e82576bd0e0e1c0b73b9c18148c829201f01a485b89196afe7
2021-07-18 09:48:23
0
67
3cbca0ba8d640dfccd0c34a03f2b97002c45ad6ba408fd85a947ed95e3833802
2021-07-18 06:47:54
0
66
a0d1c120ea82eb0cbc27f686a8ab74c31ed887807cb66a6d72eded9ee4470a8b
2021-07-17 11:05:30
0
65
92a73f4824fddc894eaf71a6d14814ee283b4e3d70ed46bac6ac759ed9682977
2021-07-16 06:15:16
1
67
828e9e1494e014c273c08a00af9b8684a7b5417dff1583e0d0b96282eb3c7a6a
2021-07-15 19:10:20
0
67
02562135010728ed1d71ec7c2aee4c544b2bb37e2fba4e89d9df422ce937a475
2021-07-14 02:19:32
0
66
97e847b56ee3dbf380c1d2ac81b00a009758d1c889dcb324373aa78c40f215ce
2021-07-14 02:02:45
0
67
0f7028a4e07aff2bc10c8f44348a5837fdebb5239c245e2d0b2314d6b8b01570
2021-07-13 00:41:37
0
66
13569750e8f5dd521f230d06d0d041cd2fd9eed93a9ef1ccfbab8097bc13d6c9
2021-07-12 19:18:30
1
68
f66aeda3fdc5aa3ee7f0b1287ff41529dec4b0ddc2c90ee9d6ce7693c3ce4be0
2021-07-10 22:01:56
0
66
4ac7dd987aebf75513fa39e297c7e4ae0c89864c393d7566d2d6285870966af4
2021-07-09 10:22:22
0
67
8569bb4013edaae5564b2adc51b9d2a56e51c01a6af34c186c7da056a598039c
2021-07-08 01:28:18
0
65
83358fd76266d88b357e49bcb73ff1074d6fa8935352cb8370220cd6a37c003c
2021-07-05 13:30:03
0
67
9f0500f43792e312c3aa34d25df51253c135f3641c588778004200e7659cb283
2021-07-04 12:01:55
0
67
ab58a23f95bc7c682dec0c04b798c47db595b4ae96bc59a697b6194e6beebaf5
2021-07-04 09:05:11
0
68
2e26cef6f391dade6140c5db553851bc2f579fc15cef49376ca6002f7fb37562
2021-07-04 05:15:09
0
67
704918d0618e229f1f0a22b50d552a8f28531f0de51fd4787dc02633d55dcdfb
2021-07-03 14:59:27
0
68
fd6d2145d49afd9041807dd8d2d5bef00dd6df30dc04e70920512810c234279c
2021-07-01 20:05:54
0
68
9ea9d72aef895de8db1ffa6178050c0805d880595c2977cf51ca0873f807a2dd
2021-07-01 19:50:39
0
66
75acdd17dc2f98efb5ba894bf4dc6f2750fee8eb334865a54768216302428ffb
2021-06-20 09:01:54
0
65
d126f3ab6548973bebc57cafb308b65edaf6fabb02511ad8d525c8760ac08f50
2021-06-20 08:52:50
0
66
5386130654b0ac1315fd2b9798c323ab881060c2578f8e59eea3495c184daba9
2021-06-13 16:56:08
1
67
66de14557de3f623dff01394345ae63f4a7fec4fdc6b527b522c9dcba152679e
2021-06-12 08:16:16
2
68
97ef10b51bd456d886905ebde3e25729ec8e3dddc9c4b8ad61eab68d2b61a036
2021-06-12 06:50:17
0
67
fccc77f1591ec996a52627d818a8fc655f6651ea90d8eec3e8a580375ea9feb1
2021-06-11 03:53:25
0
68
8fe088c63e16319db457a6badf31b5a7ed546ae3c3b7153fab70cf544ba99c21
2021-06-11 03:41:51
0
68
1c2ca1119d72cc24a20e17558be8596b8d0821348e8e6e0a22a090d8e8e22eec
2021-06-01 13:33:52
1
68
e3a7a91143f667e5b6241c50f2f3b43aa968f11dec9a0dd53dd2bb869ba39fe7
2021-05-30 06:08:11
0
67
5c7d9d154eee0edef2dc648fa52c21213d1d6d8bb85b0600d7961b543c412842
2021-05-29 04:21:08
1
68
4475e62885bc58a0b93af4cd1b9795726d0cbe1dda14da831fee113f39990c6f
2021-05-28 15:28:33
0
68
54f3270ee20264ddcf74555c8a6b62ca08405b2c00316636f9ccde92622dec9c
2021-05-26 22:12:59
0
67
355500e13dee18fd011b92ebc28b434969a5a04982075def840d5638bf7d4f1e
2021-05-25 14:25:11
0
67
a5b9bc149f79539d5caedc39ac47fe24407b59a07a4d8cb0f3e6336743768b24
2021-05-24 09:52:21
0
66
7789124171b75b85e747724f5982417a2e6fac57a4991991ad3c42f1ffb16ccf
2021-05-24 09:39:46
0
67
0c33719f62aaf45564e50bcc0bdea5c69ab89391119db9014f7979fc38b91e19
2021-05-24 03:45:03
1
67
10f64213c76caba0ca1499abe08a16ae05741b23db6d7ac3b90dd709a9afe194
2021-05-22 08:14:45
0

Rule Matches per Month (last 24 months)