HKTL_NanoDump_Jun22_3

Rule Info

Minimum Yara
1.7
Tags
['HKTL']
Name
HKTL_NanoDump_Jun22_3
Description
Detects Nanodump samples based on opcode sequences
Rule Hash
dc9cfba0735e073e7d485388118a3f22
Score
85
Required Modules
[]
Author
Florian Roth
Date
2022-06-27
Av Ratio
19.13

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
38
Suspicious (< 10 engines)
33
Clean (0 engines)
1

Rule Matches

Timestamp
Positives
Total
Hash
VT
2022-09-22 23:39:46
16
67
32bf8c9cef8f1d8880c408464da0b6150690cc1ddfa914cb34082cf55d2180f9
2022-09-22 23:38:34
29
70
5dcfdedeb6246f980b0f43b77aca86daca5236502f44edcff03a67a0e794be27
2022-09-22 23:33:18
17
71
ba41a2961279e342c784e9ab77e967cced26a3e1b2abbbff692b1b5d2fefe3b2
2022-09-21 23:12:53
30
71
be622fa57ad77310cb4c9ed8fa8a2a9f0db06f3f07e02e6b95e83af7b4b05a40
2022-09-19 17:13:13
6
70
1b0d1fd6876a0e0bb95299f7e781d80f35ab2caf0097b6816a7c169b53cb0192
2022-09-14 05:07:28
22
71
b9f6519d2add618b62befda29a15b5c2c73a785838b937c7cce9698488020723
2022-09-12 15:00:42
23
71
b77399f19e33191bfcb3f3ed63122b730dbc7eb73eecc8fafc8f2023fde0742f
2022-09-12 14:55:20
22
71
96890f2b48ed2b79b57c0955033440fd21f0e3eb15fd245da8c7d08f091af090
2022-09-11 16:10:11
31
71
5aaff354c73e03f770f47642d405fb45380c59bd46030313ac03cbf2a706d5e5
2022-09-07 12:11:33
10
59
dc38b3220bed5256c3eae0948fa649cf73c4e08b0b74a36fcd7ec1a1056e9d27
2022-09-06 17:16:52
29
70
2dcb49a52f4e29c8542e16d1993990dd995bd76a0f581d26ab65f1c7ad2357f5
2022-09-01 14:12:41
18
70
abd7624fad15be9fec1e194b611630bc7763c0560a74b5be7004aa9fc4491c1e
2022-08-25 14:35:07
22
70
8fff06805609947dd608c8e11a2a9349024a1d0c834799e4d18206a548b7d468
2022-08-25 10:13:13
5
70
e785ff0d6da9149b8b9155522549ccf12f6f6f540241471046bdd21a20cb3b55
2022-08-24 19:39:33
13
71
8102bc35537076632e15f2cf315b584ad1ff09b159d16836eeda0ae1f0b4665a
2022-08-24 19:38:10
13
71
dfa0cec31009a90db221285ced5e771ab7d7ba8c2bfa3f0270cdea726dc7a596
2022-08-19 23:53:46
8
71
0c31114b80ddddac6e1d067c73dd8d8c46ded313eb329279c751d09ddaa6614e
2022-08-19 23:47:14
6
70
7ab722bcacba3d3e45beb740b3753b335bdae8b1e73091564bd0cc9cd8cae1c6
2022-08-19 23:40:24
6
68
ecfe713e1af9d4c4f0a8ba9edf8d7d885d92566002e5a17d2b10df487c8933a6
2022-08-19 22:11:15
5
70
680cf046ed93339ebd68ab7879a93d8abf1d4e5dc0ee08a57b196682fdd6e3c3
2022-08-19 21:24:48
5
69
454c069e914303de3fe9c07847e0f9775f1f0d1724e75b0f92709a41d750268f
2022-08-19 21:11:52
3
70
cd8afbf3fcd90314894f7414edd30bc6e0a71fee1c4c4aa7cf8443b1b4272315
2022-08-19 21:10:15
5
70
433cef7c84f11f155362dca45991ef80ad23fe0f5ee16cd1b9db90bf386f7c6e
2022-08-19 20:35:11
5
70
0924a95e3925aa0bd5d33dfd0890f4d4ba0b9b765fa98cbbe9992f2f2c5aece5
2022-08-19 20:27:40
5
70
23988ccb37fd54e11406741bb8f93bfc8074ae3205311b05da8c7e60093b24ec
2022-08-19 20:17:51
5
70
c4937653573c96de90a146b89a2c97f3a22f5ecdffdbdcff6c6f9fbcfd774b2e
2022-08-19 19:47:09
4
69
8869a6863b95140839027927fb474425a7fdd29e4357b1d2ef301ec139f1390d
2022-08-19 19:38:14
4
70
01dacf922c7510b81ab2670da0e5d7d83952fbb55ae2fcc2c4c6937fa882ba49
2022-08-19 19:23:31
5
70
ddb30e65ce19d5bce5938f637de76b01262472a542bf71b2873bbb01cc660d5c
2022-08-19 12:49:54
4
70
532d4a63d87d30eea3a44f83b6ebf60fc3f193d849f8a543103b4faea2a16e79
2022-08-19 12:39:41
4
70
6456f89211ffaf9d65b87a6534b220ed95e5346d95dce55e9c078d1ef5158a00
2022-08-19 12:21:44
5
70
ad0ab1b2e4e6786a657f514d765862209150758c5c306f959f5d22a9944c1ee0
2022-08-19 12:06:48
4
70
b5be790f03cd2a8d3fcb08ba61805cb0221873be890901df0af6fbd7bf67a236
2022-08-19 12:03:34
6
70
6f21d47289962e6f2c8be40f7b86d4c4313b43fc2472a9eb4b35f45e52099151
2022-08-18 18:03:47
6
70
db09fcded6d85f0e8503ca0016ba1f9e47e332c366f03377c77bbd5a0e2ecd11
2022-08-18 17:40:14
4
70
0b53516192625b96ff6f550d409da1adb77342c3a75fb437bada72b708f62f97
2022-08-18 17:05:35
4
70
337de0c7df6b105b44609932130633692b9b1b29c1d1e6e3352952f54dd0b90b
2022-08-18 16:51:52
5
70
331076558ffde8d1200f58495c35e9d8a70ce372a5fa700125d80b96abf56553
2022-08-18 13:21:12
5
70
6c900162f0a2b44388d3ca49cbe0542c6acc56c0a27d05e2b25a2a05f6a6a70d
2022-08-14 03:00:35
22
71
eaf4312fc88de272788a1e5ed1692810642da96cfd0e9d37f35fe5c0a8253a62
2022-08-14 01:53:33
7
68
32c78e5f6dc8d0209e9aa5970f042eb1154e8a519d2ddd130880bddcf872f404
2022-08-14 01:53:33
7
69
34166f82efff8fe24da91858950d90d4f8c041cc0f44d8cac04f04b617fe3109
2022-07-29 16:55:26
8
70
87204a71f037f541487f3fb1393c69653ff81a47562a1cdb374d70f5ba02634d
2022-07-29 16:38:26
11
71
e4a2ab49ce4925caec4447221bc7352a05fce1098522b60b87c728b72eac12d2
2022-07-25 17:50:33
15
71
b42d19558ffe5faf5e5eeba86832cb894d7b66517ffc1adb2b0399763eeeb7c1
2022-07-22 23:41:22
31
70
fb2bb65421f0197f9f032f1a98a94927b4914a7eb32862fab5bc8e711b3d811a
2022-07-21 23:27:26
26
68
a1300ec44f2cae8c9aacdcf54510116b9ce6429330615d1e88775aaa8dd4a233
2022-07-19 15:27:07
24
70
a459566b347cde6a8b646f2047d89eb313372ab95f456faae181e1919cc0cfde
2022-07-18 18:02:35
0
58
b20561616dd8530dea43495b60fa9ba000a45832eb4b24289c7aa45bf2e6cd00
2022-07-14 08:10:29
40
70
bc21f289cc113a77ca1f48900a321d8f0eff024634a9255becc8afda66c213bd
2022-07-13 08:26:13
24
69
08b0377a3f68906c532a294721cd0629a2bec4450955fdd3d8b9353c6441e203
2022-07-11 18:26:07
17
68
5248137eba76bf94d7aa0b7c8e6f95af398b4a91caa0a866d661931627260463
2022-07-11 18:26:06
15
67
4420361984ed694c6eb82299f1faa919cbea7b22ccf946647b0a48b4154dd0da
2022-07-11 18:26:06
22
68
1f6d536056cd8e53fc7feb49a3e4e08ba54aff6d6d161840c3cdf4975ed9ece7
2022-07-10 17:36:54
14
68
23bfd2022e16feab0df970005a72357a232f7e878db834ca820fc8726e23fcc5
2022-07-09 11:48:51
27
68
772bee824aef919594e42cb54116e1ca9403e303d97d6cacf0a7014114703ae5
2022-07-07 13:10:23
14
67
5d9924cc3f17fff93bdd27bb7274b9a2518e00d2ea94cb816ea9f8908be8284e
2022-07-06 19:50:30
3
68
c126564ed0ac17792103050f3c59916db97aa587b9734f85124f9119abe7235b
2022-07-06 19:41:21
4
63
33de3c965d071bdeb43bbd43fd4e9095ae4ed6c7b0d9090a4a671866d3b0d085
2022-07-06 19:39:10
20
69
546c93bee210a1a623693a5dfb3d0af7d08b51a250b0d4853e61f6fd990d62e6
2022-07-05 11:54:27
4
66
c7130692419e8515486a07463637661a75aa49ca71089fcb371c297674f28c4a
2022-07-05 11:54:12
14
66
411309e53960bb41391b9ff524b669583442a8756b103bd3318defed3eee24b0
2022-07-05 11:40:50
4
67
87998b8b30ee073b12f439408a5c79650869677d45b9e5bae11fed754668e1c9
2022-07-04 16:12:01
35
69
f1c9a8ebd23f23ad291978f20b729973f9f86e65d9e9d5c73913b4a64518ec13
2022-07-04 12:24:52
15
68
b8307d9d77a5bc6fc5db91bb3d894bba2d6fb6c5197d09d11c2fddd2a5adaabe
2022-07-01 09:32:24
10
67
d82f8f020199ca0c26f5cd4ca2acd46a960f89488b5ab5d53744589785d7e26b
2022-06-30 18:04:34
5
67
88559ac8dc69440d73f380f555ec9cb6210aa1e21dd8f1ae95bb675ab289e0bb
2022-06-28 21:38:17
13
66
a4140e3c79cf5f3ff4d7364dc05d5aa85dc593e5d2a257e2915a34b40c0a8042
2022-06-28 21:32:59
14
66
e0e65b368db18daa72d71020169ec5cb98dd2aa24c2f082ef9ea718786443950
2022-06-28 21:21:09
14
66
30a8e1330e7a2a589c4c9b7b5d90614fffdc660eb0d5d5546910e93e782c9f0a
2022-06-28 18:08:12
15
65
5f346f2ded51909720f86dfd2f17237d45504dff37e4086c4d1a3b65cced5a51
2022-06-28 16:26:08
38
68
8a630e07875a1068a647a99293f70de59b1d16db2b1f0e1aa2c5b2fa637b1a6c

Rule Matches per Month (last 24 months)