Rule Info
Name
HKTL_PHP_Reverse_Shell_Aug26
Author
Arnim Rupp
Description
Detects a PHP reverse shell
Score
80
Reference
Date
2026-08-10
Minimum Yara
3.5.0
Rule Hash
c776eab5131af62916dad058a92ee85a
Tags
['HKTL', 'SCRIPT']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
4
Suspicious (< 10 engines)
4
Clean (0 engines)
28
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR