HKTL_PUA_SystemInformer_Nov22_1

Rule Info

Tags
['HKTL', 'FILE', 'EXE']
Description
Detects SystemInformer components (former Process Hacker), a legitimate tool often used by malicious actors
Required Modules
[]
Date
2022-11-16
Score
70
Author
Florian Roth
Name
HKTL_PUA_SystemInformer_Nov22_1
Rule Hash
c83d724ed2d0fa2e37819a3fa9ee2bd3
Minimum Yara
1.7

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
9
Suspicious (< 10 engines)
121
Clean (0 engines)
11

Rule Matches

Total
Positives
Timestamp
Hash
VT
67
1
2023-03-24 07:18:39
0417430ec90fae159b29cfd269e0b609d27440e55b28e15eb6c8b8dd93ef509a
68
4
2023-03-24 07:18:37
c08b1619a7c4d9da7194e409d19c7bd38c41c8046dca53265ebd9d76f50e4d5a
63
1
2023-03-24 06:07:24
1a58d1478a77e9fc603cb7abd46f74b7767fa20438bcb5f81d1cb15683d881c8
69
3
2023-03-22 12:24:37
19072a19f86b2e76367499c09e111f9a6580f2a2d8a605cfdea3794edeb5f5b6
68
6
2023-03-22 07:28:17
add78ca4ca8e8ede1e1f2c2e95862cf462cb83601a9a6be0684c0f8f8863b485
68
1
2023-03-22 07:19:59
5e2e3256696a077ffa842f247644efb277c4860d42ad5a824860f63de0ce9e71
69
4
2023-03-22 07:19:59
014d2aa354847d6f5d4bed45475ff209f987f7b1c9f3fd20c2dcebe4190d28b4
69
1
2023-03-22 07:19:56
dfc1476bd06d990346663db2e8fe2e1f54898238ee9692cd5770f35c5fc7e2e6
68
1
2023-03-21 15:12:01
ba7dbd41e2f8eeb390361e2a8dbceb2db27645041625f5189ac91367f6384fe4
69
4
2023-03-21 15:11:55
a909104f32f2a510fa1a9f473e51f47e20af29751dddd914d5d9cbab2d81044c
69
1
2023-03-21 15:11:54
7ef16a5dd79574f771f82dfb1635e66dfaa7bbed4ee778b387df6171533b7ea0
67
1
2023-03-21 12:11:39
6d8a062042f655c37973bce0574c0eaff00b2d0e14b1665319c60d56b8435b5f
69
1
2023-03-21 12:11:39
c1dd6a10bfacf69d88ca261a6ff381f95683bbd65acf38d12010f5bf8d11b4bb
69
4
2023-03-21 12:11:39
aaa5e653f72d78f23ea90fe792c2900405c436c96cd75c3c88b74cca60e6b99e
69
3
2023-03-15 09:57:27
accd43a2baefb1db95977a9407e241c5ad3874cb5be547203934b3122fe51f2e
68
1
2023-03-15 09:56:15
60f87c6c94ccba397b4e5e94467d523478201cee117227ef6659b3881776b160
68
1
2023-03-15 08:29:47
07d3d0ce75c2f164287bff0b0da05d4d557c9dd09583a49978e37efcdd1473a3
68
1
2023-03-15 03:34:07
5c3a449a0662ba7a6ac569eca1d20f7cbc2da9975674d87ffe6493625291e99c
68
2
2023-03-15 03:34:07
46022a284493c725772d34daf0d06b5f408d795fe7b6d7f0c3eb6b9d4be96be4
69
1
2023-03-15 03:34:07
125c1e9d46427e5b8c89fa67cbf298abe5ae9dda106bdd90c7bb2e2f3bfc3583
64
1
2023-03-14 06:51:00
c3f314657bb4d31ec777506ec5c5b978e93b37dbc857bfc440e7d088b31b6bfc
69
2
2023-03-14 06:51:00
08d771c4a23c98a1fa0cb9b09f5740e656ca4567f2f68d7c68b478fe88dd8c39
69
1
2023-03-14 05:39:42
aa7e2db542c5c5b87e04f3360fcac826e29435468a7ae38f2c5e8829319a239d
69
1
2023-03-10 16:06:18
8e0564497dbd8603182abe8d3ff319989e5c0dba5a130a4d4e0631fb0487851b
68
1
2023-03-10 16:06:17
c4b5676957d39a9e791e9068c865ad2dbfe4c862bdabae7c12c3cbd2a9458096
69
11
2023-03-10 16:06:17
0cddb9e409447380e39fb736679a98c720e2e12358ac824b50db177a9b3679a0
68
1
2023-03-09 13:49:58
70fec64d9992d7b01ed2274c723f6ac67e4560ef6a47f8b1e6b3038b0ffd4ad6
69
1
2023-03-09 13:49:58
d861e87ea9acef27d839a8740b939b986df516caca86a1929cb03774df7d3be8
69
11
2023-03-09 13:49:58
c3fbf5fe91f607cfa1e058d28358a63e2550ecb9399d234ceb888156137edf98
69
1
2023-03-09 02:22:12
5b1fe3464a9d0c75860ab5a42f85adf34a5fd1a06de98321e64bbe7085616cab
66
15
2023-03-08 15:06:40
a62b52e494919a97b8277e2859f8e1c0e4d257b952b3a4773dec2e7cb1d05753
68
1
2023-03-08 15:06:40
98f51f5dca6ba94f9088f7f307023010f155fab402bd37ebf638e787cd4e3148
68
1
2023-03-07 13:12:17
13ad885ae58e82ea4e307db8f63cabbc46b993c30e3663a8ed040e97380f5051
65
10
2023-03-07 13:12:14
58754d4c83c29bce39c9487b6fce6c36f751b365cbf7a245f71c4ddca6c2a47b
69
1
2023-03-07 13:12:14
3be170bb981a40451da7828ce425e658c2a6951c8ae40f60e34e2105fe22f8e6
69
1
2023-03-07 08:10:15
57d8f18138de3a287804a0a8f4d3bb50159ee1b538c2e975120c1edb1e945efc
69
1
2023-03-06 18:07:04
d9dfe37b511469c2aec4d0d6d3c1cbd6aeb2d62e13f8a65e43216e9a7afb3aad
69
0
2023-03-06 17:06:56
e2606f272f7ba054df16be464fda57211ef0d14a0d959f9c8dcb0575df1186e4
68
0
2023-03-05 19:24:27
640954afc268565f7daa6e6f81a8ee05311e33e34332b501a3c3fe5b22adea97
67
1
2023-03-05 19:09:47
83bc24fa75a7956207aa53680c94b4d0076e2e51f4853fe562f44e839baf66e9
70
1
2023-03-05 18:55:50
587ae1dd7c5b9d6eb49ad8b4c6e54d0f902c52f3353c1cad7fda1b45520ea930
70
1
2023-03-05 18:33:26
15cda614cf40213295fb156c00bd4afb5bb12192452e2658c0188270fdcdbe0e
70
0
2023-03-05 18:26:29
b4c2ef76c204273132fde38f0ded641c2c5ee767652e64e4c4071a4a973b6c1b
70
0
2023-03-05 18:13:33
3241bc14bec51ce6a691b9a3562e5c1d52e9d057d27a3d67fd0b245c350b6d34
68
0
2023-03-05 18:11:21
4c3b81ac88a987bbdf7d41fa0aecc2cedf5b9bd2f45e7a21f376d05345fc211d
70
1
2023-03-04 18:29:20
f04d43e830f2355aad471715991df0efd3dd63650fbea4c997db087715e562e3
70
14
2023-03-02 17:56:20
ff233451a33412cf337251ae9c27e94462e8cf1650dc835fead7ff1684876703
69
1
2023-03-02 17:55:10
a7393a88a40e8d1553d7fa174384b50bc8040cab848dd9fd2e5a1c46e0b95a7b
70
1
2023-03-02 16:14:50
49ba515df07feaaf6f3262ada3e4029671b8b09f46296191b520c6585cd83278
68
1
2023-02-28 08:49:29
ef8b5535747e1bfe6b8e556b2ca6e85d36f90b2f420d64987d72c6d39a62dd78
68
12
2023-02-28 08:49:28
2c17ff4579323bc15521fed4ca7c0d079ac71c7cc8d0382c045cfef7fd80f0de
68
1
2023-02-28 05:10:01
f240bdd30b8256d948e0e6a2cec673ddd1abd1e30115cdcf2d9fb58695d9ad2c
69
1
2023-02-28 01:46:13
000a5c74ce492d4e190afca6c0411203d627da42763a7bcc5a79237622df4cf7
69
12
2023-02-28 01:46:13
4ebb4c6afccf71ee7a2898c4182aabf1222a13e8c043cdfb6fb1a2d7f1a4f06e
70
1
2023-02-28 01:06:37
badb1c93cc6f23e70e8ff64216699d45ded2e2122d16c2b4709cf8bece2ad19c
69
1
2023-02-27 22:31:21
86d68bdcd795a45f91d9469906772302320281d23325bb4a3059236bbedd2d17
59
0
2023-02-27 22:31:20
92aac936ab1a88a53853c53d2610a897b2eedffed475974af7e663763d8ae72e
70
12
2023-02-27 22:31:20
4ec928fc6ac9f0addb919fd9b2187dbb5a14aa91977db71a859e59254d658c35
68
1
2023-02-23 15:59:14
2e5178886004f156a14bdcec8179ff616b3397a47a7ea43b6d16081a73d63ca4
69
5
2023-02-23 15:59:10
d9fbd843ec4fa98622480aca97b31a91d24f7df8dadc2582c08d4328e6781966
69
1
2023-02-23 15:08:30
790719de9c8a1b84dc23acc168a7a4b2c2e576421bee96f2b28673eacd509e6d
66
1
2023-02-22 04:32:58
1709f60ec5f7fdd5b07401c50f035e301a347892a4e4b98c1c2d25427550fcfe
68
2
2023-02-22 04:32:58
06ba01974bed6220f7344dd7b5bce3afade28789e9e5ec370125d2faa8839571
70
2
2023-02-22 02:35:24
a2a1bff4a094de5ef3e8fba7edeb94ad73f283bd6972ca7ca19b48d6193cf936
68
1
2023-02-19 20:06:51
57e687c98f13537fedd663cd6f8846e828b4a45f383e7e55f45808aee81c5778
70
1
2023-02-19 20:06:51
5dfd4ce80d4843b10c6f8e314a4bcec16a546172a15143076fb325bb7c9f38c8
70
1
2023-02-19 20:06:44
228f78d9f3bffd7c694b2e1e9dd3e5a747ddfc8f5b4f7d9310028d4955432c8e
69
1
2023-02-18 01:10:15
06db95523164860900924888a1425feffc01444329828b4781aef78ee9bf24f6
69
1
2023-02-15 13:40:59
9785a847b881744c9b4d0c420802a2037230fd93c094970279318c6735bd830f
71
1
2023-02-15 13:40:59
2fd4f00314f57219c43af9602fb680930d6485cf82427854b131e83b4e60265a
71
1
2023-02-15 13:40:59
b258192af2398101a3a39c95ab61657032a511ba2aeb50135160ca83a8b3611d
69
1
2023-02-15 03:45:49
315a612a6e17d2503e0e7c278b84efbcdcd4f93a93bfdc06817fad462526ec3b
71
2
2023-02-15 03:42:11
ff41c30a4bf715452b9de850d92668a0ac01ec35273e4f063e2a7a6985382255
71
1
2023-02-15 03:42:11
592dda08a502f1c40144eeb0d98b39c62b853e564ae951e91909d91f34f9d586
66
2
2023-02-15 03:30:37
b74e829094f8fb6a4bc32547d4c249661c7863bb3a62281dc5f490c91b7cf52f
69
1
2023-02-15 03:28:59
4fb44e7913746276d90b03692be563aa809c79be4626dcb4ac055a2eb044cbbf
67
1
2023-02-14 23:22:27
8dabaff5be41deb986f15802bc073932bda2e9f949c14927929e0fa40b6f0590
71
1
2023-02-14 23:22:27
3c34e490e089844de459010e90720e93a6b1a5ab0a7ec8a42207f51bf7199587
71
1
2023-02-14 23:22:27
71098e591d1373f48259f24b5016c3314f1c0493ca3423f0e1cf8e36bc5cb8ff
71
1
2023-02-09 23:48:22
272c550e240ceb602e95de4bad0058c28254628dbe7e47cc44d0e59d5c95921e
70
2
2023-02-09 12:00:21
4f4be2bde0ef6c479972a47763a96453bf902c3956e5a51fc8351fce83bedaad
69
1
2023-02-08 18:30:01
9b50233032ff1e166c84a4a84b8d6bbc150b7dc702fa1fd33f058e8bf3568b8b
67
1
2023-02-08 17:58:10
6abff2086ea0f4d7f0b75f07d53eccba0584ede645ebcc6fb446c86b30a2f735
70
2
2023-02-08 17:58:10
e24850d465ee079829d560b3d35b2eb4132e8c25acff637fb4566a76cb8f6430
68
1
2023-02-08 17:58:10
f3c1c987f2caeb7c796237ad922a2a3eefa0ee2d53c6c6ef2970ed9342b75d81
68
2
2023-02-08 15:05:58
6dfe036a9b7d6f1188c8d714044860bd8139b11c4b0a7248812cce944d7f6e33
70
3
2023-02-07 18:07:05
a636cbc14c169f589fd0e8666406353fb0dde7a3e5699c39aeb492b733df3679
70
1
2023-02-06 12:06:58
a317e4f494159aa80fa68e5f328054cac9c7c9275dc9ca83a02640277e0f4a60
65
1
2023-02-06 12:05:53
8f1a8778f1479835b0565b35e7f4b68df4164ffb7a12ce7c85a49c43fc25e256
69
1
2023-02-06 11:16:11
742ed404b46cc79aab88f90199970f8f3963efab82b766acf0200eefd70d2ba3
70
1
2023-02-06 05:07:57
1816cf251f08dbf94da7fde1826c26de2084fc1e39b0ce4e57c818aae9d94a54
68
1
2023-02-02 18:06:40
55ed66606a68e5e350593cc2ffc0fa68a974636a89aa6b4c516c027af091d6e8
70
1
2023-02-02 18:06:40
670eb39a6b6f338ebe18ffd45962dfe561f7dec0fcee5e5619acfe3ef375377d
70
2
2023-02-02 18:06:40
9a9649b265b2831c382b14d089e9c2fbf3db3ccc2e0a792d1ecbd3d2ae7cbc41
62
1
2023-02-02 16:55:38
24359351fdc3e750051f5201d91862905162f9e8d0b62c00300e4b41296bfb71
68
1
2023-02-02 16:55:38
11e5fa15dc0c816f3714b2ccbdb91c507302ec6dcda7c65b5dc2d32fc76d1f18
70
1
2023-02-02 13:38:19
8497bd68f5bd7c82f03c11e7113faca40806ddbef5f32667cf469a0f0d841acc
68
1
2023-01-31 11:03:51
8c455c27e76c39215950517019af32f86ff4643cdc94599c3ce11d46bbc9e45e
70
2
2023-01-31 11:03:51
239e0d6427fbbd257eadc3df7d0e186fb69d42d403f1a880cfa7f4cf017bb270
70
1
2023-01-31 11:03:51
5f8e08de41713479c93545b1870fec340969e5d0305c01e272343bbc0f68301e
68
1
2023-01-29 08:20:52
049a19ef3495bf90d660182144796d509e61522a83b172caed3e760690171fbd
64
2
2023-01-29 08:20:51
e20d58b022c2e8321b2f904a3e1c8bb454433f1827e2782ef5f90defa72572d1
64
1
2023-01-29 08:20:48
d4f6387b7040916aeeb3c9e1f8268b2a96e80bfff38ca6fa4ca499026b2f5f9c
68
1
2023-01-23 15:11:53
b52078ce5d15a997407320a5a39a7783d25697bc699ffeb7e01dfd8e6f9dc137
65
2
2023-01-23 15:11:53
0480b40042cbb90fe49335ea52342c4f037da6b9f4b9cece58ffbb72cc56f2f7
66
1
2023-01-23 15:11:48
8a6e9dfd145e5cb8d03ec3db1b7b0163325be33e5c8fdd4126e9f8df2af2a39c
70
1
2023-01-22 14:16:03
e9cc43e5e76f956c7ecbb635623224ba02f99f883f82e98eb437af09bf435bdc
69
2
2023-01-14 15:34:19
ec3bca6887b3a3399df623684d4eb7b736fbcaf21c0f945bc5f89bcc3f328f22
69
1
2022-12-26 12:23:14
d7039e4846c937d4d9630b02abe00cb5221e3ffd387737f2a8a38540412a7d50
71
1
2022-12-26 12:23:14
ab029047623c211b91107245369d8adac3ab484c03fbe0d6d8b36c7ceb35f5e9
70
0
2022-12-26 12:23:11
af569eaeff00103fac98763ab9f5ab15bd19c4a8b6d087ff133348d9f068c37f
69
0
2022-12-26 02:22:58
38ee0a88af8535a11efe8d8da9c6812aa07067b75a64d99705a742589bdd846d
70
1
2022-12-24 10:24:27
e5564baa52f2fb7d34f48d75340f99dc251f449fde2ad8c1a7be93403080387a
72
1
2022-12-24 10:24:27
624175c9fa45514855e1f36a4b9ac7c59e1fa7bfd039d4d840589b88fdb59965
72
1
2022-12-24 10:24:27
44f740be3834c8240ec006b917fe2ae75c2895cd2ba028028d20954298c3e46f
71
1
2022-12-21 21:47:54
33c5b6bb3c6462cd41f96ad39d8bbecd7fb6e4057ad93b064c96532be1e926fc
71
1
2022-12-21 18:12:24
6212c6c30eabe702adab1898010f03afd2bc9b96bb436fc3e6c3d38c136b3f7c
71
1
2022-12-20 16:16:36
d7124f18994efdf2597ba016b22ba4fa61447f4effa84d56b14ceed4d723f269
69
1
2022-12-15 16:25:51
a4cd95a1589b9cde30458ec9631e8f41a0d46a883a79f2adf1adbd58f013ad5b
69
10
2022-12-15 07:31:38
1c4e20181fac637ec019a45e3acf039319b8d47a91ed39534baae2bc05e03165
72
0
2022-12-12 22:29:49
2408d9a8e9bc79decddb67ef9bf5c11271c830cfa971acdcf1da4185f35d23ed
52
1
2022-12-09 22:19:32
b1248dcfd40fcc579d5c6751cb00a65d6b87b7ad8f83df6ba50e4778ef3037dc
69
0
2022-12-09 21:34:57
fb76569d7c18131a7e523f1589b1e60d9d1229d931b828d1fa36f3a5b3f97fbc
70
1
2022-12-08 19:57:34
8da05dc4e5d37f1a5870013f39079ffdbf82d4d5eb8a5394429296d6fde02670
71
1
2022-12-02 09:15:47
ce75e6578551e98e7211f02051d6132ed6ce5205b518f0c53dcdf15482362f3e
71
1
2022-12-01 01:23:06
ceceecac9c1602722af4e195d63e414128771b415d12d836be42e1c8be051365
72
3
2022-11-30 21:21:19
f1e2e158abd47bb75223acab8d50c3d726573061337d06cb080a15b934328272
71
1
2022-11-30 05:10:41
470b164277d7f616c6d5947e65438a538d4fde075918751044cd101620ee0019
72
1
2022-11-29 19:35:12
f4d1da20a8f32d2a8343bca42edf6e7e9e271f61718588b4404e23b2992f3fbe
71
3
2022-11-29 19:05:05
ac6712e83ac8be49aa505e74ced6d93963ca21df95b22c4f1f2632e2080cb2be
71
1
2022-11-29 18:33:31
9842388b8d8d33b4829f6fd6676efc7abd7c1b23c694f288df09c4d54dbac354
72
4
2022-11-29 10:07:53
42b70a6744c7f5d7b1c71f9772a6ffc437462a2dbeadbd6a54daeacca911138a
71
3
2022-11-29 03:22:40
393f15e5d863b33d30830a0ae06497bfe620969660defc1e0a3037803b0687ce
71
2
2022-11-29 01:14:16
a4bf6627bbb8a50219d7a228a9e27a1c4c279cf3a23aa14e1e24ff7d692eb857
72
1
2022-11-28 20:45:26
2c74043919c764af7a445f34d556e19c9ca93163bf2ec2de037dcde778810b01
71
2
2022-11-28 11:31:44
2fca5167b7da3c85245e03db3159eb005b4052e468e81fcdca14a3e5e549ac60
71
2
2022-11-27 07:26:03
0fd1dda6c3ff46c7f1b1cbc23b493c0def45b2cb64eb45963c90305010faae39
71
0
2022-11-26 20:16:29
8b9ad98944ac9886ea4cb07700e71b78be4a2740934bb7e46ca3b56a7c59ad24
72
3
2022-11-26 00:32:23
742c467d9f1224387cbd176517bbd788010f0609a6ec33a931f80d84d6100323
72
3
2022-11-25 20:10:56
a5b9eb45c6caa067c0fb2dcbc010d99d13086be2edd3efa9206626b368ef22ca
71
4
2022-11-25 05:09:34
77630edbe08b29d1d0a709a3afb54c1c7e198eaee1013b8057efedc1d14f158d

Rule Matches per Month (last 24 months)