HKTL_DLL_ReflectiveLoader_Oct20_5

Rule Info

Av Ratio
9.47
Required Modules
[]
Name
HKTL_DLL_ReflectiveLoader_Oct20_5
Score
75
Reference
Internal Research - VTI
Date
2020-10-27
Minimum Yara
1.7
Author
Florian Roth
Modified
2021-01-05
Description
Detects reflective DLL loaders
Tags
['EXE', 'HKTL']
Rule Hash
d1021dcc979f7065f8132f209623515b

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
29
Suspicious (< 10 engines)
67
Clean (0 engines)
31

Rule Matches

Total
Hash
Timestamp
Positives
VT
67
04e9a157b09fb35d844ee91c248de4744985495daaeeab4de474711e772f017e
2021-09-24 19:50:37
10
67
57e0ee1505535dfdb925efcc353331ab8117f12584244c9978ca33741fd0db05
2021-09-24 19:08:07
11
66
357b590ed5386832e4de818a2350a53f7da1de837eb46a972fe46a0b16f7b71b
2021-09-23 20:59:51
10
66
4a4f3a574b6ec2c29e5b3ba447690fa3b24596411a2408a44f9b13a705931818
2021-09-23 18:02:27
4
65
c3348c02e0dfdaa67abbe6ad2c7222ae798a3ee9ee1c0048bca83b2d95aaf0a2
2021-09-17 19:18:28
0
67
f023340a9af2ad520178d731cf4bd1686093cf3bdccc8bbc3b0434f9ba3635a4
2021-09-16 04:23:36
3
67
b6756cc9360f7f2a57ceab97b77e78f9b8bc5a6e12f05360adc126d951bd71e2
2021-09-16 03:20:16
3
65
6f2e73be17315a10ceaf3eaebac405927ca9f8594882244006e79a7e86335983
2021-09-16 03:19:06
3
67
90a29cfabc3cf6a1ced12c2b915927da220bee61c5237cb1f1a798b6d8c27755
2021-09-15 16:37:38
1
67
5d84d6ab2d76bbc687afa873fdfb81312bff3beaa5c708af7d86139a9aad70fc
2021-09-14 12:28:07
3
66
a79ea63cfc5d57a19a347f55d48b85b5f78e130ddd070343de41fdbee92ac359
2021-09-14 00:15:20
1
67
7e19f7fbf240281184eb0ceda95e701f12a22d9f3db1fefcac552d95551f5e84
2021-09-12 18:38:36
3
67
67046e73a95b974f058ae9efbb009be4549e0ee7b08c76c0fc0bf702b05fc1c2
2021-09-12 14:41:18
3
66
d4eb0a2d030c575ba5b8fa8c0120119fe0328bf560a009490949643b1dc842bd
2021-09-08 06:13:09
1
66
8e92b1d2799f8f657ff163b2cd9b2839843f5e5076158de3ada2b8b3dee6197e
2021-09-07 08:34:13
1
66
bd249ebd8368193ce071df4d91b6f002b364acd9441b44b1c39a4bf5eaf44969
2021-09-05 18:05:35
1
65
f6bb8d1ce88d1073c785fe06bb04c354f7d567331488a0ff50c478ea808c7fac
2021-09-04 08:31:54
0
65
e21891407f126618b5ff3c418227420a2f93baa5ab78cdb75e34f9e55ea0fd71
2021-09-04 07:36:26
0
65
52c6949a428cd207d5dcc3cd04d4cf75bfcbdf03b0fc2e8545dc843e3d01fb3f
2021-09-04 07:10:59
1
67
67f796ec8e83c45c91af4a2bd8588227d34d725ebec88fbd1fa27822b7fe695f
2021-09-02 20:49:57
1
66
a1866bbd5c607cb309fe40a5933e3339fc4bb57dd73a69fd1bfdba019e5f4e32
2021-08-31 09:49:52
10
66
4a18e887a958b8f3481700831f2f140734df1157b804efccd9b27d06d7da6f98
2021-08-26 14:42:47
0
66
a30e346c0c968370351226d24ad2563424b026e5f74ed6644a9884731ef9d6f7
2021-08-21 08:08:52
0
67
37054a6429911499ce882efda183eedd20a2d3567ef24309c1d0536b1d2d9715
2021-08-20 08:10:33
0
67
052cbde3bd5e72cbae0cfa42cbb94b6244dbef17d5c4a081fd9205ed08aee2dc
2021-08-18 02:52:14
0
68
82a1808a4629411b5ab7fc1b5024fb6ba6b2db5b4695a21db099c7590869ffb1
2021-08-14 20:53:53
5
66
40c787783fb9bdb3be951da665e3e2aa885173d26de6f5921e54da5ab89b578d
2021-08-08 08:57:50
1
68
5a9c8b3a6b4e084e257706d55023d91c0811063c2aa6f3e55f9a8609101a48fc
2021-08-08 01:26:17
1
68
722500b797a06a8196df78f448eb592207f75fd6ff0b11e2328a07ba0e067a3f
2021-08-05 06:25:22
1
68
f0ed7838f42c55f13781dd2da9d6176b546cde132c9ab99efafe78f33e7f82a0
2021-08-03 20:32:00
0
63
1693b0286d753f5c2c78fe52b01d165704a84b035fcf564ca537eb1e86732f33
2021-08-03 10:07:30
0
68
00b0656e62d998d1c4ad12451c908a058ca647eb3c54e3b10f1ecb2f0ad5d795
2021-08-02 12:41:01
2
66
cd82d6429ea4559a28de78a2af8d136254cf3b7c3f44610aecac308cb47da59f
2021-07-27 11:03:00
0
67
89cf105dd7df4ef7d72ce0a1126195aaa5de46f8338096c465bf425011440979
2021-07-25 14:13:49
1
69
ef8ccff221634ec9b2d75ec5ef1b92849cfb61f7dca471611f72f5cae3505f5d
2021-07-25 07:16:44
2
67
026bd551e4116355b2cfd28f721529ba8ab5bd0d86bfdcc12f52f94740889122
2021-07-24 15:54:01
0
67
22da3fe4806beb66436c496ad67cb6d5fc69a9fb20eb2fbbbdf34b0d68ec9966
2021-07-23 04:20:13
10
65
afa11d7a07916c1bb0b58789a230a23212d051112d2cc550b2e7c3346b3daa61
2021-07-18 05:45:43
0
67
a03271a89f827db9f73534b4ecfec794b66e251f636dadce942e00e59ef691f4
2021-07-17 08:06:31
1
67
a5a0a4adebd6d81dde6de17e0a5744a9f2e1a44f67d720075cf352fa2c44df62
2021-07-15 18:28:20
2
68
f6a2c948eb3ea770fa9a8d172c89809fa68a95b7cce6380ab3189022a617e147
2021-07-11 16:41:06
3
67
74844adc7d85bb43c412e0049f690c1c0833b400bef6a16e2d1d1554ee1ac607
2021-07-11 01:36:57
1
67
9766026047905459f7107c0af60d1ff9044e9ecac50e2f3a0b5fb96b8d25832e
2021-07-06 18:58:34
1
66
dc43047328806e42bbb592764fbd64e1db15b2b7daef406679fb98ff141275c9
2021-07-02 21:54:25
6
67
334456a43301ef63338b80e9ef834991052866a5d28f0d46d5402083e13b9774
2021-07-02 10:20:32
3
68
6541095ccd194d3e3eef0dc329e4d1cceef79d464566c871d1ca99f37f94cb19
2021-06-22 10:29:48
2
67
ccef2ecf0ffac8d1fa61b0a8aaaaa572bd7a3cc70aca5844fc274ca5630000ef
2021-06-08 08:55:27
0
68
0c62edf630f39c08cd5bda8c7e41a2a5df30859661cc0e4763c02615ea919db9
2021-06-06 09:01:38
1
67
3c20f6f93f309f0f738966939fe6ad4bff4da6b596c78353731b38d40d93375b
2021-06-04 08:21:07
1
68
4d709ef58f5127f8638ddf07ea6f915b9b2af52a98c6890135e68e2a646cdb13
2021-06-04 05:26:31
4
68
8134b165295130d324632772be1dd537530284521285d61202e324e486e12bc0
2021-06-01 03:50:59
1
68
79d8aa2e3bdde15c78dff5d8baf6be5e6c6dfabe8644bc7b2c179d841bfeea84
2021-05-28 00:53:54
1
67
4fc407cb94fbae3f56c244248e3827aef1b474e920094de4a3f6a5e1fcb8de8f
2021-05-23 04:47:50
1
64
298fc261db1ca4ef2125f3323ae251e019e5e513e240d0582e2da20028000913
2021-05-18 10:30:30
0
66
e279f32872d2a9c595d7535ede62eb9fe0bce25f796cfebc4600880d05e28a2d
2021-05-18 10:21:04
0
68
e490c60027d1d30054139be69bd3b0dee6d454e8af517efd7d80157e2c794ea9
2021-05-16 23:50:31
0
68
160bfcadac9261de90e379786b98343e6bb3ca3e44ced609a3eb901f063562d2
2021-05-15 09:16:45
3
68
38258d6d83c67bb149fe7ed3f42252cfe43b4c1129610a4483fa7ee815d2ddca
2021-05-10 08:28:58
0
67
54d641e4098ddc0082c7d5cd485949fc5d124da006be4b97928c8bcfddd4de1a
2021-04-30 21:52:06
2
67
d2e27f54c5e655d02cefd994847d7492a43b84a30731b4ad507bc86b957d18db
2021-04-25 23:59:38
1
69
85541aaa40cfb034c883efc939334925f6267579111cd6343fe2c94746a3328d
2021-04-25 14:25:49
37
65
a2e77661a0e28344bd266e3d9a7fe1b2bfb0f85320775b3ba9c31b6da1a34ef2
2021-04-25 08:52:11
0
66
27bde7e8ec0909b993113c585c1e327c0495ba6eaef02b849ead0d3a95ba7547
2021-04-22 08:42:08
1
68
51c6195398716e4d4ac8eafb1c6852df8523f4854d54594bcbde64cfa4527f87
2021-04-21 13:09:03
1
66
ef89a28ab2f0ad1df1f6df52956dfa379ccae89bd71562d6d6077d5f2c47129b
2021-04-19 22:32:01
1
66
679c599f81abb05146e40fa6c2b004fe16c24abdb99d2c8b837a3675dd5b7514
2021-04-18 21:53:58
1
69
36e5111ddd24fbe651809e050013e58064ea38e07fac418e60d7bc09ac0be958
2021-04-14 15:50:48
24
68
c961a2c7cbdc88d57913c06338f7287e01b3a7a9f04f606999fa48bb2b19bd10
2021-04-12 15:36:40
0
68
188308299875dbba7a6d7a16c8249620d88ff1ae61b8700980026f7207e28b42
2021-04-06 05:56:55
1
68
23f7c299376c4aa5dada64774478a440efa9caf5c73e5590b76ab903f5e31730
2021-04-04 15:40:58
4
68
3c29a9125849423ae03871af72b605831f80f1eae033b981cb9dfc1367edf969
2021-04-03 15:35:40
0
69
7fb98fcadafcc8e8001a358595ea1de605dabd06b186d7059d798b8ef8052c0e
2021-04-03 15:34:37
3
68
516dbe8c25f80a7d5013c1c2aba5ba78c1e116e08dc819aff724cfe2e00d4aa4
2021-04-03 06:08:50
1
69
1c52632e6f31566534155a273d1455c16456d3e51733608f5a5e40abb9c802d3
2021-03-29 23:34:37
35
64
e0d5778530eec95d88083af1f43a720c82e213c6516c90f2a8b13ac835aaf5d4
2021-03-21 06:36:59
8
68
c2dc48829e3b885f8641b8801ac2d6761d4443b2f74be01aaea72d1caa2da3cf
2021-03-19 08:15:58
16
68
00471f8e7fbe1c17974ff4d1eb8fecadb229b9d7e43cab76d4ce8b7690b7b2d2
2021-03-17 20:33:05
16
68
58973bc88efaf3e8f75bf09de86a14f4fc517f5fcbe763a87ae672f1566c6470
2021-03-12 18:12:58
1
68
c13a5e7bdf346a5d62aa9646456b055443bdbf8b02fb40cc80c16f8230d66107
2021-03-11 04:49:24
1
69
7604d4f7b28431fba7f848ac560023bd7befaa80e5c072c9fe2ff307bd9bb3bb
2021-03-11 04:48:01
17
68
c2bda90b5cb6d47ea99067c68911f9c3180f2a98da56658f3f686fbd9d3d523b
2021-03-10 12:47:32
1
71
61c70b6679ef079a88f9fbe542b4238d75289901bf2b8712853dbb76923da137
2021-03-01 14:50:37
27
71
e622911a29d6b14a73b42cfb30f027cd7e6acb483dadad6f9a490dc9fc296f56
2021-03-01 13:21:53
43
69
e5bd0f00df1385e624161ca955de8de29d08ea0797d8cd700717be307aff90f9
2021-03-01 09:35:22
28
68
f23b50d92369b52e91aba84dec19594c6eb151c2f34e3b4e5fbd804f8983c18f
2021-02-28 12:41:46
2
69
f39538502ba7d59acb26beff144322a8b9da9c857d26d3c7d6962cba1cdeb8b4
2021-02-27 19:09:23
6
68
5afe5a874905505353d8681aacf9ef67c66173aad193ca510e0c21168e6db563
2021-02-26 12:38:35
31
70
b96408ebb6e5e80cc3c2d9e3e84ebdca99ec7ddf6126b02961a5e31f9e1fd0b9
2021-02-24 13:49:38
23
68
f5e2b241c86dcf55fa9e45e440af6ec325e9dd2a3737b808c1a88b5368153830
2021-02-16 12:15:42
2
70
aacb4108731b10f73a5308ff842ee4d468c1037806a3457119ce3526983cc1b1
2021-02-16 12:04:30
3
70
660daeca8247b21162a3991be84d0b44e733a0613ef08ab1a555ac2b9a699c94
2021-02-16 11:43:00
2
70
10a7e85be5c4c69f39d1bdc7103167300de8a2699c2bd703e154ba3d7ea2570e
2021-02-16 11:42:03
14
69
1d294bba35251c08e505faabeb2208e7c3d0828c3428965b7781a18bfe868416
2021-02-13 15:16:10
1
70
0f8cccebdbdbf768f4590ba638c2b887482c6a39409effc825d0f8307ca54222
2021-02-06 21:59:06
4
69
c0019ce4eabc493168eb2e9d1680bea5d4d64c5a763a64508c1b50f58cbf851b
2021-02-05 06:12:41
19
69
fb61d9ad279bd4f45f4d05ea2483172091ad4e1aed3c99d2ed528e6daa5f7b65
2021-01-24 01:43:52
1
70
a49a2d8eb28e47348072953edfb8708e2f9709116d5124dd53517e1361833d6b
2021-01-24 00:30:14
40
71
af1f1780615673b394e113b1d5c5e9d0187670d7af819292b7cad333a478ffed
2021-01-23 21:52:04
42
66
d3a3550661dfee9d7fc481adbc9a75d7eaedd1034b9fce98829829da25546d7b
2021-01-17 19:06:35
1
69
eb21fdd57bf5917a8cc8e3e29ec15f65c6c1c30c91ef217fa735cee3e468f978
2021-01-11 16:06:46
1
68
b08698e997387aef691a25f11fa6e47aff01b1cb24b04ae59c3b3e5e1d234c84
2021-01-08 08:27:07
13
70
77d9179fc6332f050fede1a2d222d2812d3185ced8b14d0ea935da858b8c5c8e
2020-12-23 03:03:57
0
69
637cc24223d48a2102a8ce8bb16e412cd56fcd2c9b7b83a2266d63f83f0361a9
2020-12-23 03:00:10
3
68
aa235ee2af7e9091de7ebafdd31a801cfa2e6a07dc621de4a1cb3a42729e97fe
2020-12-20 22:22:19
0
71
d30ce1a561e6cd1d243a2d785c61714fba09b6d0d28c60f48c1b06244a089218
2020-12-20 22:21:02
4
70
80c4c7d8655d691dacacbd1733e70453b274b73e480ac230f899b2014feed2a7
2020-12-19 18:18:04
0
70
e940fcbc775818acea6df31b4f8c850c935a52552c191971e8c302e095dd15c6
2020-12-19 00:52:45
0
69
de2c3af0d029b1475ad9025a8a76507225ee7ba48e8b26f5a5019f618f21f269
2020-12-18 04:01:29
1
70
b025b29574f81b8cf715d5749a24aa7e65307250581ac56a16e26e37139a17d9
2020-12-16 23:56:28
0
71
fcddadf81b29e7d981c277cd94069734833731be06aee45319cdc1f4529e4449
2020-12-16 23:52:25
5
70
c693f95058187e266b654341445aa765df696d1fe826ac627d6eab97216c1249
2020-12-12 15:28:53
21
69
3f8d50d292efc6410da5445ab13a13345a02ea8fd29670953e83987395924b3c
2020-12-12 11:48:51
0
71
72aaa05d137595e1b8e81a425aa3d282e05b28b1fe2f9f1439fc996c6d745459
2020-12-10 12:52:58
0
69
c910782fdde9d04561537116486c949312a8eb70654f21b25461aca324eca6df
2020-12-01 16:06:42
0
70
aae5ed3302035387dbdd16a4a6d4b3fdb9252b6bad187035938fee238584934c
2020-12-01 16:02:35
5
69
68d949807a34bd8a8af0a054ba104aceb065331d047a994434af1c4b7cb277e4
2020-11-26 19:10:28
0
70
512d0f752280463be6d700208953d749714964a7e52d2f0db373960a2fbdb246
2020-11-26 19:05:48
5
72
ed05a883285967cf71c2f7d34a737dfc061a38bada16433f0fe431982a7fd784
2020-11-18 11:52:41
37
70
84b7aac95d719334630184f9582a4b284bc9d3b5e1b57f0cbf73120ec4aac5ae
2020-11-14 12:55:13
0
71
36859f498b5dc5e6ec573a0a3275a4810110de143e6965385f8f896ccfe0197a
2020-11-14 12:52:40
5
72
41999759767a081cdc69f43b2cd1d8e65725da2b030044cc291a32f274161c61
2020-11-14 08:53:21
17
70
f6c1c8a636cd9991bd8dc88ccdced21250eefab46a9f0fe4422175a1a0bac751
2020-11-14 04:06:18
16
69
6cc418139258cc5d88af33a5cf47ecd15e32ca3e2289c9fa1ca754b3dfce0f0c
2020-11-10 22:09:04
0
72
1280688e2f3214c6ff3cacd4719918de358fa1e35ec6faf9d4e9e8244efc2f2f
2020-11-10 22:08:45
13
71
ba312d716ce7f96f5074aec5b5d5db5c1e322a3a67f475ded8434f170ce7e54f
2020-11-10 04:04:39
36
71
a20bf035f13308bfe5a8ca46f0aaaf75ede18df8d2f0b37913288b9ef3d3b64f
2020-11-09 16:24:28
34
72
1ddba8c910a77455bc60722d039543b57d106963063851c6085f402bf8a51f12
2020-11-04 08:44:01
34

Rule Matches per Month (last 24 months)