HKTL_Bypass_Tamper_Protection_Reference_Apr21_1

Rule Info

Tags
['HKTL']
Name
HKTL_Bypass_Tamper_Protection_Reference_Apr21_1
Minimum Yara
1.7
Rule Hash
20d229d9873259ace6663a298ca7416f
Av Ratio
11.35
Score
65
Author
Florian Roth
Date
2021-04-19
Description
Detects a reference to a project that is used to disable and bypass Windows Defender features
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
29
Suspicious (< 10 engines)
79
Clean (0 engines)
18

Rule Matches

Hash
Timestamp
Total
Positives
VT
1d567cae14877ed81ceb0f9af97f7760d7fc408f49e49ef3c6fe992422d02778
2021-06-13 14:42:13
58
3
37200a5463d5730a40283f63fb76bb4dd97dd2c0ec46a44e15b32aeef7b60196
2021-06-13 06:13:38
59
4
b39886b8836e5a34ba4aa06bc63e4d1c63e0d193d003bceb240323160049847f
2021-06-11 12:59:17
58
11
d17cc1b91b3fb126a28eb7ce9fd4bd51e53258dce3f3cdccc98bbbe2c1918186
2021-06-11 12:59:07
58
2
df5307a55186cffbc8bece2e26e36741d2f9578907b211674aedc0ec28a1cc0e
2021-06-10 23:20:19
69
28
a489df9a636b382b879c71049b3067b767a6053c24a2dd22037c55f60738aba2
2021-06-10 22:18:52
60
18
f60835dee1535639ad1889c5327ab60b6ec5f137fcfd750e64d12f042e0b787d
2021-06-10 19:15:40
57
0
561395c56080c41428d236802f3871963e635c670ed86695d3cf06098cb9f4ee
2021-06-09 19:48:57
59
7
deb84d7e47d3676692f8acf190019172a269c0eeb64020c3d0dc019c5fd0797e
2021-06-09 19:28:52
55
5
6d62343ee4d6791ff1f451ea2070d88297b257346e09f542f208bc3130a24dff
2021-06-09 18:43:29
58
1
a3561ee59ddb01763aab2643f42fe2ccbda672b2e4c679fc4e0a2b53280793c8
2021-06-09 18:38:57
59
4
344e6b80c3cbc308689d70bdc5d21a932363cf4f0f84395259a525651bf6d2ba
2021-06-07 13:49:08
67
21
34adfdfd1bc300b428f61a77e38ba163177ab2b64d1dbe0fce3b2ad6d68a11c3
2021-06-07 09:16:01
59
17
d8778a38a651e28eff3acb3a707170e1dec78ce863f8034efb27fa59d7a84a5d
2021-06-07 07:16:57
58
1
56a446a49ca1a556e543f07cda48bba119aff3431ecbd814067c3d872581b22a
2021-06-06 21:18:39
59
2
83c7ce8bbeb191dccec4af1008d3b09bae970c8bb09d85a2d9880bfa95b3d9aa
2021-06-06 14:30:54
59
4
e818bf4b420bfe87bdb886d6bcf5540e500667a6176f678ffcb4cde92a4dc7c8
2021-06-06 01:04:32
59
3
953d1699ff48e9007ca9ace8e9f12b51aa251aae7d29fe033744e393359691df
2021-06-05 23:13:26
58
2
d19c3ee9c72611fcdebbe60acbad4904b7b52b756257beee725e3c512ec6ab65
2021-06-04 15:21:51
59
2
eec2bee0032d0ec5d5a564ca304ea38e34a1035daf6738f24ab09f3d0d8743f6
2021-06-02 18:24:05
69
15
0197e36fd0ed256e1633b36e9fdabba10f41010fb4cce4c65c748ffdc4dfc6e3
2021-06-02 17:48:30
38
1
106e9fd2b7bd8d9081bde263f04c4c95869ea567482485d2cdbe0e3ca7631e95
2021-06-02 07:37:28
70
46
b9ecc01e6e66877646da1b8537c328853bc388e89fda388625c3f5b9c0f7ed57
2021-06-01 21:15:25
70
44
a0fadda2aa60a6d95e7923e21d7cda4fb1ef67fc2dc536f324f62e0808cddc79
2021-05-28 18:39:54
58
5
9c0bb6b8f5242d272aeb479250f8dc4ff39849e9419b7ab208a80034ab8a90d1
2021-05-27 17:33:56
59
6
f0e3784665a1de8067e4add22ae06fcfcf7e39a1a3c5ac7f8cc440d37e16f78e
2021-05-26 00:44:00
68
33
d96dfdc6a706bfe5b2ac8002a426381fddec450e523d8d8b017c15ad08364b27
2021-05-25 14:50:25
59
4
fde601b4cefb67d3502fa7bb4c610d8d667ce767c4ea404aeb3a1bd04c09656d
2021-05-25 09:50:20
58
3
0f38c262792dd45484310d01bfc80c8235443aed6675b8d82fb407ab78263df2
2021-05-24 20:53:17
70
29
624e68ec269c7e07ac84844ae17702711edab9b17ff1cbbdab6afa1a7a5d6ca3
2021-05-24 20:52:58
69
30
2aa7396ea4fc06d558e3f24ba10e296de2c7ea5d5d7346281085c62dae8702ce
2021-05-24 20:52:14
70
26
b1d3a7802ba5f1379b7d0469e23b9af3722939e4bfd16e0dedf9993dacc39fcb
2021-05-24 20:51:30
70
26
89c75f00d68278c60f276cac1be05b0e7b2b7656171d8cce7114a42102226204
2021-05-24 20:31:30
58
3
6bbfc6194314fc242f1efc05f326082823e1ec5f23c1c864485ccf38acdb9165
2021-05-24 20:29:22
59
3
7e7d9d8976aa626499304ffbeffbdae0ea3fab94d20e4a486106867b0f4f1d86
2021-05-24 20:25:02
59
3
e844037a3fc5c1a874166f51066aa4d0c5e03036f63c9318580ce3ae8da2d547
2021-05-24 15:42:20
59
2
e82035b69a1470ad5e3b9e018bc5c8b954113b46dcaaee621e14f1c7a57f3e19
2021-05-24 11:57:50
58
3
8dc00dde23d6fe575c1cfa072ad3c5221f498681413d9726984da13423d8d569
2021-05-24 01:20:39
59
5
521604368c7f3bdbfd60a3b1106679c5957160340bf090a7dafb27d8173a70dc
2021-05-23 15:32:31
58
0
d03bdfe3afce4235c415a5df56fd022e172ba03436b5c22427ff3354a2c390db
2021-05-23 15:29:22
59
2
2195c623d00e33c45bdaa8742200837c97908500c23582ad22416bdc7d1f83d7
2021-05-23 15:28:21
58
2
4db1cc32a5881b8c1b9f83aa3b97ee3a8e0d2ad8ca715597e7d5b1e2be680438
2021-05-23 15:24:06
59
2
4b3e9be6bedf4aedab4060a204dac98c1a384c082c27d8e0125ccb9be3cc370e
2021-05-23 15:22:00
58
0
77bddb86f0b9268fe786469f9519e9cee9ace4b38165b39c9a4e9d0d65ed174e
2021-05-23 15:11:34
59
2
0f752028254ee0dc7ccaf67d2068dde9cb0a80692103e4ce4e5e1a32d74faf65
2021-05-23 15:08:27
59
5
f5c94b97b3466041dc145070f5bc8232d2c63946728e4dfe4c1fa739b9741056
2021-05-22 02:38:01
70
47
73799f1e5a16e7be0e8f9744d3d00f468464ad6ad48ab953eb539fcf5c5525e0
2021-05-21 22:35:26
65
19
f350c2584dedc728df921f356137778143d0ee3cb23d10ad9b95866bafd45d00
2021-05-21 21:06:08
59
3
bf163430aa98bfa650ac7ee6595131a2a0b344108cf20e8993bd162b4fb246cf
2021-05-21 20:39:04
59
2
d92fd1649d179366b487185a4f6eeb5ed2814e1e384b65ac976b5f89353209a2
2021-05-21 09:12:09
59
5
4f7e1041427ee8c3b96fa61b4438845bde712e32d8e6d5e1f3912ea2542c055d
2021-05-20 20:14:28
59
5
9c60f4657b3b490eddbbfa275769842856a1290df24c72a4d69e59f70380df10
2021-05-20 19:58:59
59
4
b2266b476d3c411111da2fba0bb848214ffe8135ccc9764cf1da3b83d7d5f76a
2021-05-20 19:46:59
59
4
e4b82661e53aa27c4401bc6d549660b1aa3174265239eebfef0facb0a3242c3b
2021-05-19 00:32:36
58
5
71eb6081f3e94aee9140b24c17b9f9f6cb2449290f08fa83f70d2e35b3e6015e
2021-05-19 00:32:35
58
5
4e00c36d84278747af4fc484c6b79f634da19a20419b5fd9de188ea69b9f6e5a
2021-05-18 12:40:06
58
5
db36dfc8846646454ca6659c4a535ad761fe38e89a7bddacf675e532b88531ae
2021-05-17 08:52:53
59
2
6781948f2b949111dd3cf551550b70d862022273826d61f1e84afbcf8be7121c
2021-05-16 20:02:24
59
4
115edd45d9725e68e56e0678628f70824e6209c54d60f36ed7757f70cfd32613
2021-05-16 19:28:11
59
4
d69236be345e5a119abd9b1c302d7f0bcbec90e18939a4668dae03b0d60fef57
2021-05-16 19:24:16
59
4
bc1734299958b3aa41c5333c881b0bd8590412e64b10b46c77f072150947f55c
2021-05-16 19:21:01
59
3
82da65396c917ba0afdc18d210bd5bf4e28ec00da48ad7ceca0391bc2531569f
2021-05-16 17:04:17
47
1
45d9ba2022bbbb56fb9de2b79c64af6561b2363a4d9fe733a7c9af849adf9c30
2021-05-16 06:31:33
59
4
f01f2c8d7fa61b90cdd0a679d9481fd57d25b454131e23168151921355a44874
2021-05-16 01:21:25
59
4
9d57f9d9b214632b9e0ecf2139c3585b997aa6c8cabe913a7abe29062ebe5855
2021-05-14 15:57:05
69
27
b5273be00f06fd1e5cde8b09cb6d004da29de9a9f06a4ccc213ef580f61d2660
2021-05-13 12:48:12
57
2
465254a92369c2587ff65fac237f73bd74dd09b8dbadea8238000dba5defbbf9
2021-05-11 07:23:47
58
0
155342484ab0ec3c114d0becc0b4d09dd5725437c82756aa6fd5c0387be6487c
2021-05-10 22:36:51
58
1
f549e9a9f553ad03bd080b313701e6f4a981744742bbd83f4fd276fc892c06f3
2021-05-10 20:30:10
58
1
a76137b550e665ce07b6aa31b8717f4ac3fc6a563880ef182b3f11adc2c6ebe2
2021-05-10 06:30:18
58
1
118415dc5c9aa219eec124e7bf14716a143b0bd24cda1251add53f97bbd19083
2021-05-09 20:18:17
58
1
37831b31ed0156d57c2524e665534359d6b2dc363226d545fe29d00a7425aca3
2021-05-09 20:11:52
57
1
e8d3c9d285e7cb490652e1f0232ff3701c4f1a0ed4bf600a3bedd0339863c7e4
2021-05-09 19:57:09
58
1
9395e028307d678588606cec5a1c6a74cb739002bba0234e468ce3c0dbf6d475
2021-05-09 12:39:45
58
1
cde8b8ffa73ec10326c86cbbce6608ad64f85df5b1ac3ea49f8841b6eb73363a
2021-05-09 10:22:34
58
0
a45db97a914a8e0fe74724e7721e2aad90082346d18116b3927b19670908b511
2021-05-09 09:41:11
69
37
90aeaccc8b3a2e2b7de07d9c4246472614384e9f5ec9c53c440714c5605feaca
2021-05-08 15:34:43
58
1
82d47aa010e16816641586d1fa3531010af7bee0bc0b88f1eae9143200b5d092
2021-05-08 12:53:16
58
4
cc061279109a69dfe5d23a42c27304a46238c8207a8a3872915f028e52a29716
2021-05-08 12:25:38
66
24
242e4c4406f14fd21119b66f2bd2463bb5c3dc06da009d649de976513165a887
2021-05-07 21:06:14
69
27
67b4db8f5239eae334d3f9a1d3f9251164d37a8ce2f87d5b8c96482af3509860
2021-05-07 20:08:52
66
24
2611e307eb203bb1e1e7eef578f8b10e3ae7ccba945a76382a25cd0ac98d80df
2021-05-07 19:41:05
58
1
e9e11017b82ff2be8fcc238804d4714b5592508a217031d9a4b3aadec0cf45d7
2021-05-07 19:40:00
58
1
390d5120f261099a4e5752ef9f6adb4f57bf33dab09ed5e24c139cbca452b6ec
2021-05-07 19:37:45
69
26
567328ee929f4ca6b26a1c9dd089b4c238a5dfe81a2865d410454b34444b4f32
2021-05-07 19:34:13
69
26
a52893dd5973f4306d43ade5771611baa6baddbb377ced262d9a8eaa0b835597
2021-05-07 18:26:25
58
2
48668425b72f27c9342bee6251afd691b89fb58e4f768c93e3fa8b2c6ace7654
2021-05-07 18:08:47
52
1
ccfe00b3a06aa8b4636680c6b69b6257dfed2f688001cb6fbfdb7c605c103e54
2021-05-07 18:06:30
57
2
05a203f12da0ae5cfec1b239a73b0baa26c520ea3642d518faee2fbe4231d510
2021-05-07 18:05:28
69
18
f14c11fefe3fa6d1fcb9257bc8759f8d22fcaf2cdeca5f71dc2361783ad2ccbe
2021-05-07 18:04:23
68
17
1e5442c42cfd512f05f1efd370b32c17dcc23ed71a4d0f5a4a91fe94affae9c2
2021-05-07 18:01:55
57
2
3e7dc6ddda3ba1b28e3b3ffa45a016c63cad2a6c200d3a20c54d454663955847
2021-05-07 17:57:38
69
18
3b648bf0daa945f3ec34b55677f41338936d653fd11d065c09b3f28638e3b313
2021-05-07 11:33:05
56
0
5be14405e15a9cf1b9d8ac6d0d8f4d53f630a4f10779eccc518f5d3e86cd24f2
2021-05-07 08:33:00
58
1
c6c4e925de0d738b196f7a608dc83ade0b55c72c1374b39db50d63de4cc5c2f5
2021-05-06 09:41:56
58
1
95d085750ed3407070f37922ce9b6f1c0fd214d918168986b76a579dc04d2b0c
2021-05-06 09:41:09
58
1
d771c3f6e67158ad777a41c525e572c8179dd8e53d47ae6fe6b224cd398128b5
2021-05-06 09:24:42
58
1
9b5034279eb37ff7a3c5e322978ca9063afa74a54a6f1489aa49432dafeb530e
2021-05-06 09:21:33
58
1
f9524f04263e90b9f33158f5e23a17158f979519e4e7344cac234c11da697cab
2021-05-06 09:07:50
58
1
690b21a8437fc369614be6b1870bb58383985bfc15b1e29709232cdd90fac36a
2021-05-04 07:42:38
69
16
dbc768959f48910aa4c544eed8cea74e5b66af6eef54cade6f116d97a343cf08
2021-05-03 13:06:37
58
1
246ff0ff2128f84d7a70ab40e2b7a327b2b8ed4b55b7b0ed223b66e6d4bd952b
2021-05-02 08:14:29
57
1
4ac62621fb6f05356f21435251f147d3013a2b9cfc52ecbd41e00f963f70991e
2021-05-02 03:35:59
55
0
b0f53e055dafbb030dda9903ac50dce7d0c671d75f35b3677b2ac8ef10f990ba
2021-05-01 02:58:22
58
1
b39361ea83ab0bdcebc157813841980cb9e24fd90376e7514cb440e2c4115095
2021-05-01 02:22:31
57
2
4dbaa24e51a5362800238abe535b88040cc4fecb7cb59b9f5341cd34feb5bb98
2021-04-30 23:21:16
68
18
a008508c19900584af7dcf0c9d42e9ea5e7768fa0efea2efd3c0782b51838272
2021-04-30 21:54:15
57
1
248810b3bf3a8917db434e3ff6622f7d8acf8af24d28fc869670d20d7e37460c
2021-04-30 08:37:36
68
17
8f330d0201f40c4cb41843eae034deaa7368e93b256f3a051e455eb7e4360bd9
2021-04-29 23:25:16
58
1
b882c2976619fdc6a2bd6d47a2131c8c107279fa2009251e0b4f92b89313eb9f
2021-04-29 02:53:52
58
1
79b47341b0e038051fe648f8ef8b90fb0a7c8c364e078382b78a528849ed0595
2021-04-29 02:16:06
53
0
7b32103ffa10bbb085e65f1ad73423e3c73c406c051a9d3cd3d60963bb19cc9a
2021-04-28 17:55:07
58
0
9be23869c2b4036912beb750e7756b583a63905ebb8131ac3a6a632b7d880059
2021-04-28 17:33:42
58
0
ef53244ae34c18859c970eea761edc24f83ee2bad9d9c3283bb83e1fcc8a5b03
2021-04-28 17:19:01
57
1
f5ae83715031d3f7db80606029872e80152ce29fb4491bccb5778f8feaea4828
2021-04-27 15:09:52
57
0
5510c24fb5fe7a8553d4ff535e1614d3dee10ff0a65c13524091cd2d43fe278c
2021-04-26 18:20:12
51
0
dcb3a06adea142a5071834a27a619250a589d5b201d516da0f005d408051bcbc
2021-04-26 17:23:23
57
1
1df201f7adcc5bd78af07ebb038add8ba2a703843b5ffbc41f97fb5616ce7337
2021-04-26 09:49:39
58
0
ea8be79fc4aa2beee6f8b22015a4edc428d4966924fc30544696303bc744187d
2021-04-25 17:14:01
58
1
2e0beb466b804939fb8a45c811eec171808a67be540f99d44e4c334a8100c4a4
2021-04-24 14:54:23
58
0
0526a228bf04278c6d75b3ee33e7a6ab3ddd65bcfaecca8aff2673cffef91a3b
2021-04-24 14:50:47
57
0
1b1bfbe53d2280999c4e6f1a28f2b612b3e18e60c3fb2689985369ba721b8d08
2021-04-23 22:54:07
58
1
7e693df17a61d985eba1da28532ddc58ccc7fae672479a24c2730fa837fa0bcf
2021-04-23 08:16:04
58
0
4d1124f8d086ede4ff7fb74b036f89678e105f523f7fb19e1a6ba5bbb44c2c29
2021-04-22 16:53:07
57
0
f074e9e39321ed3fd4b502cccc48528cee186fe6606d559bedefaa9b99edd884
2021-04-21 12:06:17
58
0
690e9715828834847085dbd25429cc775ff46d6a457f179220fd1a927e5dc362
2021-04-21 07:35:14
68
39

Rule Matches per Month (last 24 months)