Rule Info
Name
HKTL_PHP2SHELL_Exploit_Oct26
Author
Jonathan Peters (cod3nym)
Description
Detects PHP2SHELL exploitation scripts
Score
80
Date
2026-10-22
Minimum Yara
3.5.0
Rule Hash
7fac38236bbb01bfe71e773299a8765c
Tags
['HKTL', 'EXPLOIT']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
4
Clean (0 engines)
11
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR