HKTL_Ngrok_PUA_May21

Rule Info

Av Ratio
0.1
Required Modules
[]
Name
HKTL_Ngrok_PUA_May21
Score
75
Date
2021-05-14
Minimum Yara
1.7
Author
Florian Roth
Description
Detects Ngrok - a tool for port forwarding and public port exposure
Tags
['FILE', 'EXE', 'HKTL']
Rule Hash
4572b7571db46294fa1a6c8a509d6f7c

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
2
Clean (0 engines)
72

Rule Matches

Total
Hash
Timestamp
Positives
VT
64
e43bde2700d88b5d3961cfba9d90581bdf731ff4a5b0b11c36b8382c5fa3ae12
2021-09-17 04:28:02
0
67
e69c62f16e3d21678de76030bbab9c72a3bb7125d1a17979a1f96c0ddf6faf55
2021-09-12 07:14:35
0
67
d6673f491c805ba266302ddc1d3ba7de6ba64f3c4c345d490a599794f3522e70
2021-09-11 12:45:50
0
66
e868916f65382412825200d8f943b900ef32e9ab5c5f664525d3ee27b77df9fb
2021-09-11 08:03:25
0
67
9363ef4a595cdd01fbbc48c3cb5f58949a4e8a41a6cca708bef727f62dc27f3a
2021-09-08 19:03:39
0
66
0b06c583e106a2d4057723fd12f0e3fec90d9d18d86f778cd18bf79ec986ea40
2021-09-08 11:01:26
0
68
0342123f2dea8d2a4447b2bad9db8d1901266a9544cc1b4eae24f2308f9f8afc
2021-09-07 08:12:06
2
52
92742ebfe28f22ddd5c47f387bd3db0807881b86726a93da39489c4d109bf01b
2021-09-07 00:57:20
0
67
226bffaa4c1d23568b3405de053eab8b0e67bf14256502f8561e1cf7da15d27d
2021-09-06 11:56:40
0
68
5ea3dcbff37b9e6aee2768f67103e99e8a119be52349a0c5cd8c31013523fc66
2021-09-02 04:00:42
0
68
681ac52c3f6e80da3ef2fc0517c923d3716dd6ed00fd5b80d363e7319bace59f
2021-09-01 21:43:42
0
67
fc144c68ad6aec267e17db4cb7d6c817d961ebf76b5f154da741f8691a3d6de6
2021-09-01 14:06:28
0
67
9d5c354a609629225c17d72c684f5c2b3936a78ae0deb32388cd2567171a78f9
2021-08-30 07:22:08
0
68
8cd3cda79aa21509a9d824632f4c9b777975b0ab88f9102e7730632714848808
2021-08-30 05:14:30
0
68
9c037920a801de04c57741104fc20f31370b87f7fb9f3d51f48ec423cf7b1659
2021-08-29 03:05:03
0
67
d97491132d3acb68e6f0e8518bf42a2ce01241ce7927360801b013815a8d7e38
2021-08-29 00:41:33
0
66
7558ac1ee15f0fbc8b7a24604c6dabb1c3782188fa7c70fe50f4158408c59a7d
2021-08-28 17:32:49
0
68
3f86d482795e0f09d4fd398b59cafb1fd48303d411d7e1edad4706ab7fcfb07a
2021-08-28 04:54:13
0
66
79348ad800284dd2ed44b0c5a109bf100fdfdc9d3059571d354b15ee9cf831b1
2021-08-26 09:25:48
0
67
9c1869e30e8e679492dad9f3cc0afa4c91243df42a7ea89455a5f90db7abf097
2021-08-23 10:19:47
0
68
dd6fdaf6ef2f365bf0b3fc8ab75ff58c5ed0acb450d23cb31e7faf79ea48b993
2021-08-23 07:29:46
0
68
63de1e1237280839892ff1e1a55b4486c03c624a0e1a9f0e7fd4aa3a79be8b08
2021-08-23 04:07:43
0
67
59a89ccbdd20b7148f272a4a3c9bf509873ae8f45d588cc6d3ccc8d130b00067
2021-08-22 21:25:22
0
65
a74143cb62ad6e70e80eb7095fabce9699b0f703f79c9e0817f455f48697cdf5
2021-08-22 13:25:06
0
67
cababd0d89129adb104ab7ed56111b0d2844b4befe2bb65ee383fcd37ca2f0e0
2021-08-22 05:31:15
0
68
40f82dd8a58b17f3ca6ca833482eec44ceea075dd41ad1f1e4b4e60af6156465
2021-08-22 05:26:01
0
68
fa3ae09a74258fe3cac4900c16a2cf7d217c7df90285fc120e5478014d12fca7
2021-08-22 03:21:08
0
67
e3a7ff95e69aa1f1b92a3b79cf21bc4117f2ef6b3421bd208805278edd958a1a
2021-08-22 03:04:11
0
68
81fca5c41d3f63552ba056071f1f53c2990cee6a5a541a53e3be6b0127aabdf5
2021-08-21 21:03:04
0
68
f8bb464c51bd10c4721b5e9e9136ea3688a7926ae0d430f6f2247c9a07a798c6
2021-08-21 21:02:01
0
65
e612e72b0e9175f744e49467e92223950a567a6efc711c86addaf34bfd3b4eef
2021-08-21 16:01:39
0
65
62521e85782d66929e934342e37b919099d3d18f23bff0820d58b76b78f0f3b3
2021-08-21 08:19:48
0
68
6e1dacebf710fba5989b777f25bcfdf2404f8d3f279f95cd5a90365f09680ab7
2021-08-21 08:10:58
0
63
631d5b7982c63fe0010aee84d3ee81792c762ef2a4cc55dc8a0050b4bd7c4232
2021-08-21 01:37:18
0
65
0a36dec64fb8f43afb071e7ee8c469e36561784abc7752a810fa97acc49800ef
2021-08-20 13:27:26
0
67
1d422a6311d1f6fe077542185d6fab7511bdbc3d5946bd407d89d53654318dff
2021-08-20 09:24:30
0
69
c370adc8d80eaac820b5b113a89184d48d4af92856240674a390b02eab828f86
2021-08-20 06:55:58
0
69
8371578efb1534fc241ecaf41bb3b1393081df3e9cceb23c8832846ccdd793a6
2021-08-20 00:03:00
0
68
45bb218309623cdf7276df50a706af75b603249d6d8b0c55f6907c3ab1085169
2021-08-19 08:58:47
0
68
9f2468dd2d0e01d501ae92fd2de782850191d2656be0e4033f0fe03e52e15286
2021-08-19 07:57:19
0
69
70fb2391b9acc51c5e17ab58a99d910e29308364db70b13e3bf75320154d08f6
2021-08-19 07:26:12
0
68
70a4996a4f01b0f18ea77c014a4a030f2f25bfaded60daf92ca2541598f37a0b
2021-08-19 03:25:16
0
69
5f5b75f39336aadf78dba96b4c695e99011065d78af410f061a2738eec83b6a7
2021-08-18 22:13:18
0
68
01f32eb494b9717774015ca5829c1b6e4232e60effd609225499944d7f65416f
2021-08-18 15:44:04
0
69
fe60ffc412253685dbe42dc08d926bb2c3775d81f70c85a9464f1196588c7616
2021-08-18 11:06:38
0
69
04aa4c607d33a4de34b60b295b9d8858efdd3dd97cb64ced846a7920c729afcb
2021-08-18 05:54:45
0
61
930eb5f25dfa2366e744550fa9df271a341a8e37eec7013a5a2442dcb5b599e3
2021-08-16 06:03:47
0
68
8ada480a2ba754db9b2a13b075035b9aa8343685faf1f4e6a137e27add6b6a94
2021-08-15 09:08:32
0
68
8849ff32186ec88de94f5a7f2a01cb3d569d3cd009a531502cbeaa04af8ad6c1
2021-08-15 07:50:43
0
65
70a0cffd52ad5cc40fc5a8c19cb6985b768d2990769515abc485321578cfdca9
2021-08-15 00:18:38
0
67
d6053a91d8358c9ca8f0af0557c5024489269231cb5163dff015d461f94f80bc
2021-08-14 16:45:41
0
66
e5b3ae2b3c9a37fdee26b9576d1bd66ff6661c8632047d9079f17eb30a53804f
2021-08-14 12:41:47
0
68
89ef24737c65783b55fe969b0d7d625068352cd616bad66ff2ddef0a4c73f223
2021-08-14 10:54:18
0
68
a7d0fac14cf38b970cc7e63305566021793a3e48128b948a72f9221aadc23ee8
2021-08-14 07:51:48
0
69
d82a79b8c21c7a62c31357e6f8a0aac50c3be5a2f6de4ba2140134ad17894c36
2021-08-14 04:20:27
0
68
1055592547a7647453306ae5a9c517d42fde8c5e903fc2cf8af0dc0ada0aeb04
2021-08-14 03:38:46
0
69
479e99b779df0767580d8c442895fd6978f2f447ec69dbe1811ed3d6c6356a32
2021-08-14 01:50:58
0
69
2857d00384b9e9318e87b341c3663f4985f3f02fd82bf5caa933db19e3ea5eda
2021-08-14 01:46:45
0
69
0e3ba734e48185f5249b3165d89ed7376013e7db18c14d81062d522a64dcbcc7
2021-08-14 01:16:08
0
69
d2a5bc5f92c62fb09c967c46d48e18120d9610169283e90020afbb883e6c4368
2021-08-14 00:38:04
0
65
ae3169fff282ab3666ec70d5b4e61d45864870fe38102948fd29369a84c77eb8
2021-08-13 22:56:26
0
67
cb051cf31c997357056cfd9ddd861669b10bd7f7e53d79a5c1a5319927c2559a
2021-08-13 18:51:31
0
69
8f62cc1ae1a2dc62adaf28e2b9bab456566a18c317e7f8b7df8054ad5ff26d6e
2021-08-13 12:30:08
0
68
4ed57c452c612b70e3b6ae7c54fa229d4b31542838335b61211cff89f7968b74
2021-08-13 12:05:01
0
67
c7d26b3bcfe5386de1a3ba4444b3f0f5fc77c0c5b960f34734ade971c163bde4
2021-08-13 08:47:48
0
67
5b02870eca1a13e6422c6c6ff438a94909b6e7a7ea876207c8ab01a0f1a69e77
2021-08-13 06:59:17
0
67
f64471fe827df370d9184c0da1b9b118d2d908557dcc4fe128eb57a5bea4cc27
2021-08-13 06:14:13
0
54
f0a4333de8ccbff8d551771f7d5a7e29cc2cf137d83c148abf060eba043b4eba
2021-08-13 05:26:27
0
67
cbc78f7fa0d0f5510f2d2aa551e52ca8ab020fc17ce44bb459ca12ced0b99595
2021-08-13 02:54:12
0
68
27bc042866c3b2bbca128a8846e189c2e181b02fdb10cbfa5f8ca4ed0173326d
2021-07-25 00:06:51
0
67
03f1e9f9706ea30366fcb8c57e2d5edeec6995a0deafaa577048f0dd8ed046f4
2021-06-17 08:29:07
0
63
49d982c2cfcd16718c485844c4a70cf766fcef3daa97e1940b9cd35387de0dd6
2021-05-30 08:42:56
0
69
d6cbd526f96507665a2669ef2723df118e45f92b648c183c22d51c8fdbd76440
2021-05-27 05:46:58
0
64
de4e0918d67fbb2a884ecc3e1e1910a8d13d35515ccb981d3570102504e464da
2021-05-18 07:47:12
3

Rule Matches per Month (last 24 months)