HKTL_MSF_Keywords_Jul20_1

Rule Info

Rule Hash
6e320631710a37620794122ea155961d
Score
75
Tags
['HKTL', 'METASPLOIT', 'T1136']
Reference
Internal Research
Name
HKTL_MSF_Keywords_Jul20_1
Date
2020-07-13
Required Modules
[]
Author
Florian Roth
Description
Detects Metasploit framework component keywords
Minimum Yara
1.7
Av Ratio
13.76

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
20
Suspicious (< 10 engines)
17
Clean (0 engines)
11

Rule Matches

Hash
Total
Timestamp
Positives
VT
1879ea4b9429d45effb4f7d290f92eb28fd33f3018b85294db7fff236856d497
59
2020-08-04 11:16:06
2
94fe8cdab91eafb731969f3cd049527ff0a8560de82022b392748c672d74530b
60
2020-08-04 09:18:33
1
15867e1bd274cc2c0869a38198f316a537f668e5111fba2dfe3c33418c81bf22
58
2020-08-04 04:55:58
0
8d08217e5dadfd949e3b58c03f568bd1436571cee9e42ee39051786074efb101
70
2020-08-03 08:17:29
1
255a15cd45adecfe1c3dd4871187b3c4f4e62b7d61c7e890a311ee2d7d662db7
61
2020-07-30 11:33:38
0
36f15af14deca73d5e2aa6efd9a333a33a13177e036ef63b2f92590e9f388e43
57
2020-07-30 11:17:56
4
51e0bfae9649f291ad1e17dabfdb90f3a2a451b92e730ea5cbfcaa1ca66905f5
58
2020-07-27 07:40:14
0
a32a6107852439bf2478ecb8d760a553d462b157dec84384910e0402a3ab02bc
57
2020-07-27 07:40:07
0
b365a00a0ee4e6a25da358d6683e3ce5b3f8ac8014492e7a7949de09525b72a3
57
2020-07-25 06:33:13
1
77ab99575dcd477c868960ceb9659d18b0c76fa5d7ce1116406d3d2d8c4c61f4
59
2020-07-25 04:31:39
1
d38ac125bb714d6cb4958b0e181853fd5f5c52024515f2862c4bfd529b9e87a3
60
2020-07-24 21:58:17
18
34bf39b86fc7175dffb615d01962c0e1d7fa2040f986da95c9e0680747241850
61
2020-07-24 21:12:21
38
bad18dd3136f1e70f1030ca9ee548c1f58272f7f7f22f26d45003685297c38ee
59
2020-07-24 10:52:27
1
184a9567c7ea5fac19a7a5fd45d06c917c38b82ff2cad9bd10e498494ffe9981
59
2020-07-23 12:08:27
7
a0a6fd1ad1526c3a61fb7f94f08072074a4ec05e3017f553fa7c622d55139069
59
2020-07-23 12:07:16
15
b7e548e08269266dd20370ed2a2faf528f4d0a8ed64c90d77aff934855236b0c
59
2020-07-23 10:17:41
18
12372d18087489a143ee4a101c9a8c7bbd76bd62e9c1ca7720c20cacc8f0da2e
58
2020-07-23 00:24:58
1
a4f8d1f1c0a2b4729162bf65dbb94c90de46d3ab3efadcec33425f83cf85f3e7
59
2020-07-22 20:19:21
13
582fdf9e240a141d92ab1ecf3394a808c4f6f5000822c44b8735f921b50392ab
58
2020-07-22 17:30:26
1
7e898a49a59a3958d2e6973f990c28408ef3254ee263b93b03c07bb1be958353
57
2020-07-22 16:05:28
8
5fb5bb3c7f1b56d967269bf2debc9b00aba50157b416e21f4b2151acfdf43c01
59
2020-07-22 01:15:00
1
e819db582f80411fab70ac5ec2b1b2650b4a0198276212fb3b0fddbb155cf330
59
2020-07-22 01:10:32
14
37b60f7beead7e9066c80ab047909b8e1986c2c6e1ea7fd0f32cb79243dae9f1
59
2020-07-21 18:21:53
1
33bfa0f5afc2041907534c436c8531a9dfa034ce20a4295ed939298bce35d4ce
58
2020-07-21 16:34:31
13
2bcc1f9bc88b659ccbdb82376fe5f371edeba34147f8db7ea4e978c9bf62fbc3
59
2020-07-21 15:30:06
16
e70aa3b52c9fd67e348127dd860ad6c4501d92d63c16ff2663639c7846ac3fe7
59
2020-07-21 15:18:11
14
ba11053f7db0520b07b55bfcf1ec1da05aff10228986ed81c975beaecfc9d832
59
2020-07-21 13:34:20
16
9a456ba6f0515acf65435f1c1028eb5c47a46e075ee81b7ceef40d98760ada95
49
2020-07-21 13:20:16
12
4907166611caa9b247b0b8605fa1914c9fea4a32e03d8e1a8ebc4395fbd37a8f
59
2020-07-20 23:47:45
12
f5798b1ec7e9d0860f3e707f686ef8eb5c1e060df1f2f46c2909f7b0624454f6
60
2020-07-20 22:55:13
10
8643d82e487c00167d8b666ac6f33cf09743eb27767e0506d8de64de7e7dead7
59
2020-07-20 17:53:32
1
68d765d833480a1b65148195f0fb92fa9ff98ae3b5759b131ccf0f7759c3d0e1
57
2020-07-20 16:09:13
16
43666d8e3c0ad7248acf1b4f2db7a4279fc62093574f9ec7ce9b0f65696ec526
57
2020-07-20 15:07:33
11
952d864436a22edb65d13dca527cf050f1f9116ebbecb6c31f48c9788840cd61
58
2020-07-20 14:15:40
0
11732bd36139ff10136a496e0f98e5770af43eec3523504760b5cfac77efedaf
60
2020-07-20 13:51:42
0
fd57b3dc30cdd07db9e5fae5c45bc919a55716dc7ef84415f276d10946637654
58
2020-07-20 13:39:57
0
12bd1ec7b765068a0a22468ec49627b977e65a3e473a828d0b6cb5c26c3942f3
72
2020-07-19 23:24:46
27
656e276f456b67a2b79b6511449d6e554121417e456e735e824b7829736aba84
70
2020-07-19 19:56:45
26
1c829b1e93459c454f38ccfc60b6ccdd944dfbd6c82fcef22739ae42d0cbd350
59
2020-07-19 18:23:14
0
2e61578645b9cb247139d8004e2e929c9b463b3624ff87875b5e1879b0c1f4b0
60
2020-07-19 03:19:29
13
992217c992fada487700083eb678071365f07e38bed9a60c0df988ab101a5c01
58
2020-07-18 03:33:38
18
7699dcbe1dc3b6116e19ed135055a162cd46eb61df718e2f08977918b1381e0d
63
2020-07-18 02:16:56
41
ce38fbcdc284aac89c7e201e1109b487a91afa156691f009fc5b055f2fbf4e9d
57
2020-07-17 23:39:38
0
6b1a791f474f5326081c9e8518d1283e16ae16be8fe68e4bf5bf042f3b2a2232
59
2020-07-16 03:24:03
0
1bdc3711c6638e1c84ffa19ad0c68857322a69ba7e21d869c7cdfd4f1d8cbb65
60
2020-07-15 21:51:49
1
d2a2f78b2b00cf5c50dadf5e5d2a9d0d9191f1f10fbb174dac558781d3d2ce67
60
2020-07-15 04:26:21
0
5d71bd04bcf904cb92871e08d3f87af566216afc366dccc8838d0c9ddd8eb96d
59
2020-07-14 18:58:55
3
7441e17c15b1a0acd0a766749072f295403dba5c674ec429e67dc34750f098aa
59
2020-07-14 18:57:25
3

Rule Matches per Month (last 24 months)