MAL_CobaltGroup_Malware_Aug19_1

Rule Info

Rule Hash
1730ca5e0fe55b3ec5d83e6a0a106869
Score
75
Tags
['EXE', 'FILE', 'MAL', 'G0080']
Name
MAL_CobaltGroup_Malware_Aug19_1
Date
2019-08-29
Required Modules
[]
Author
Florian Roth
Description
Detects Cobalt Group malware
Minimum Yara
3.2.0
Av Ratio
7.85

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
19
Suspicious (< 10 engines)
67
Clean (0 engines)
30

Rule Matches

Hash
Total
Timestamp
Positives
VT
d8396a8a64e4efe667c3236d784c5fbc712ef07ca50825c61d7ff2886514760d
71
2020-08-02 20:07:51
0
651f8e6917dc26ebe09bdb198225a204a3be3116c4aa08135e3b598be692b57d
69
2020-08-02 13:25:58
1
f9900c0861d790b15c25c1cd7b9fc837aff650e557afbc4d885658a638bb612d
70
2020-07-31 14:31:21
0
190f33826014cbc3d9fc70253e06175b52ed8ae5219972ab34c35aca8de0bded
73
2020-07-30 13:16:46
0
63f3b7a71f746016f072a9bde8df8dbe9a995206dbbbccc661865f61d6ee14ab
71
2020-07-29 10:13:03
0
bc9d870da2aeaa3d0e1f5b2decb2630b9e28319b55dfda4ef67fed53528e83e2
71
2020-07-27 06:53:31
0
c4a4d07b1495a4d2631d0d166928f25c0385bcf4c8b6cf86a5a4c68cb633e037
72
2020-07-26 19:26:12
0
ec52c94975f02e41795687e4dba096c30445377bdbf4305b7b1ddc73ecb17db1
73
2020-07-26 06:42:31
0
6678ae627c39175c5153adaea9c70d9a19043c24d3b7ae1235fad8a70b277af4
71
2020-07-26 05:55:05
0
28981220da14594bf2aacbdfa5aaec4d9f10fd6f3af58d9ddb6de7139f9c0608
71
2020-07-25 19:12:31
0
89f673414646bb593484946efb4bb3f677daaba99f8907ddf552c72d9203ac8a
70
2020-07-25 18:41:12
0
25a3e4210d775c77894a847e0d2e23e835efe52a4fc78ffc3df1d0a4e7cd0112
73
2020-07-24 11:14:50
0
c456c8a908143f4b07932c36e1e87b5e17a554da34f68584f83e0edb3ef46b52
72
2020-07-19 19:26:09
0
b3e76d6cf52d26421cf97a86183e75b575ab3f2d260ab3921d7cad9da60ac07c
73
2020-07-19 13:32:29
0
dc70865cf57e307391f51b73023e1e95a7188803b5745a18b2b37bf0ab0d3d7f
73
2020-07-19 13:31:12
0
9dec7da22895445ec1891735c1d442394e996feee76720fb606554494b9bdb92
69
2020-07-19 13:22:55
0
e731b465b11d248611e59b62553d014ad48110ef92e44233b6385624decaf727
73
2020-07-19 13:19:01
0
4e82adcfcbf5c9557464dcdfcd9c6815a0dcbabc35a551ec03d7e2ba1ce756ed
73
2020-07-18 17:18:17
0
f0884281bde2f53f251f2e1577d7f4c403b74d814ccf7f87aeb9b7285082662c
71
2020-07-18 12:15:18
0
2cf0e9a6d01dca3c12e3b09355b81086903d2ab86ce99f8fe4252ba2a6046aa6
71
2020-07-18 06:12:16
0
0b119d654cf88eb1dfea29a93b3c938e9404318880d68d43338104d5cb2c0658
73
2020-07-17 02:08:23
0
3f37b7415cd57b79ba6d1add662c5fa3e6a2b6827d66bc9ce1f18cfaefbed64c
73
2020-07-16 19:16:14
1
7fee97eddab052b4ac9f5f7912142ad4ef17dba1abed2e7f8c6ca9224d5fd2e5
71
2020-07-16 19:14:19
1
9d92fa5da63e9b88c4d41f6956208729fb01e22e1e98a24b50da51f5963eb045
72
2020-07-16 17:19:32
1
4b5505dfac8900361668cdcc052ec9e41db5d8d3d1db5cad933a5d8378a9ce8a
72
2020-07-16 17:18:22
1
80315ca2fca3a6547eff41ff33ac85b2a302ce17d92ea94620135afe54b893e0
72
2020-07-14 04:23:01
0
7f36ec603ea452978fa2e3034e38a6056ee1a912f144c628532e73880500471c
72
2020-07-12 02:14:48
0
fb52aa2c64253b0fc996300bd52305475f294cf0f28ea83123149f350650dbc1
71
2020-07-12 01:41:54
0
9d7d2e219a7b084e2c1caa534a42f8e007d76de5b8ea308f7730a72497eda298
69
2020-07-12 01:36:51
0
6dd82b98d869a6fdcda29d6e5cb349f90edd33ca7cacfb96844801cb5269a6ce
72
2020-07-11 01:04:03
0
ee8438faa0447cf9a1c3f725ee06b435116e47a3a0f3f6e1e1002cbb8dcc8afb
72
2020-07-10 13:20:32
0
7192574080f72647eaecb23972760e7e17c659dec92ee4fcb18ad1a4266588ce
71
2020-07-10 02:55:26
0
d25e4e9832d5ffd5fd75da8d29ba99352b054442386c4d39c29f6b458e91cdaf
67
2020-07-08 11:30:25
1
4fa5e10240001a68d26c32d3b70089d60528d29bf402c54da78f3d6d30b86c97
73
2020-07-07 01:33:11
1
56c785619828d6a8025feac7f0d72a1cd9d46ce1b3bffdf188ab74b72665b550
73
2020-07-07 01:27:26
1
35aceaac50d8bafa63585eeed84b142af1dda2fb09fdc30b68fb4a47a9c45f28
73
2020-07-05 08:15:45
1
62c8d48e7b4cf050d84ba85da1c6ae93a1bc12047c8c4de1c0054ab8fdb5faf1
72
2020-07-05 06:15:51
1
7bc971290bc3f4b539f4bf126562ea88ceac26d4642585c0e708fd8f076e700f
73
2020-07-05 03:14:36
1
33241de77278410c1052620ca4a5104ad29d3daed597c67ee12b3d165f7b65ee
72
2020-07-05 00:11:20
1
beaaa4a617b2e3ba4dfb84313207554a80f08a5fd3fbcc956b7570796a60e30b
72
2020-07-04 23:12:25
1
c13fdd5fd3ee1b0aaec6b199dd2655890e6154c0c553128a4b664376aeeb700f
72
2020-07-04 18:16:17
1
cf6b314becf6ba770bbc3ddcdfa5778d52b34dfeb6d8be5b03a4a23d182eca80
72
2020-07-04 11:27:26
1
6a017ffe1b6401cd20969219f36c794617335a320aba4ec34344d998f6bfde43
72
2020-07-04 09:32:15
1
ccd5d3e8e9b14a819fe02c612e59f54ccaa6a49ba993365bf0a132afae943512
72
2020-07-04 08:24:41
1
11fccdaa451eab2affcd701bb8e4114d3bd9394b4791d8ad555da3eece06de55
73
2020-07-04 02:35:39
1
2d39c7f9915ed550e95d42bd60e9287d483b0a21d8fb6f09a9ba48d556c72abb
71
2020-07-04 02:33:24
1
f496cae2567ebd4038014901dd75cc25029be1b0f2a2d5b7f67ed98f520db939
73
2020-07-04 01:34:55
1
986993cef8b93f72adb9f7b05071ffaef1b99916aadacb83b1c6c2b022d70b77
71
2020-07-04 00:30:07
1
d4381a94ead229847ae9c91691a6c3dc8aa68860cf43be39dcf2fc1fc7963913
72
2020-07-03 23:43:29
1
27f7ddc5e3da9f50759e0c5161b13a5ed6d499b191e726017a62f4c30445dbcc
73
2020-07-03 22:18:34
1
7376eb4b141f3ca151e5bd2ea75c4c87cc749b065294be9f4d50e46b258a3a33
71
2020-07-03 21:14:22
1
e1f7bf8047899c5c389de18a03769e8b00cc0081c21589792150219d19c67774
73
2020-07-03 17:19:38
1
d15d2f69ab670e54d08457bc48abcd986751ea7a8cb63078b99e2c918271e4e5
71
2020-07-03 12:21:32
1
b5e9f40177023c245be90bd120975a9f799cf5e056c7c9b05735cea308c36d29
71
2020-07-03 11:24:33
1
379a85bc4a063270097bac53cb0e7f8514e1bbd11793a8d0e98f95f806d95f09
72
2020-07-03 11:13:27
1
88ea4e98cca0f71645625df647961acae3cc0359ef45bc3aebadf451d52e1a56
72
2020-07-03 10:21:37
1
b8f73ebda631a9ca762b23552c084b90f0906e58638011255e76c7fa4e7f276e
72
2020-07-03 08:15:40
0
a2e9e7cd441cf3a035fbf549435d6699eec70565eba106ef0c3d85167229a0a1
71
2020-07-02 04:25:15
0
0056c2ce5d9d25cd45f17eeb3dfb0c2a1fec7e39bd3d4bfcbb42bfae15f15243
72
2020-06-29 15:26:22
33
f0a97c9dc113d647f17c03265ff798d0b29fcf2869b4984a0355abab00138240
71
2020-06-04 20:00:10
1
324ddde084a7ab887c46ba9444901bcf2f682ef9cf77612c3c9da404cb11db54
71
2020-06-04 19:42:40
6
2234104cc7361fa6f8c3356707a4a72f2a480666507ed995a938759c524fed99
72
2020-05-22 22:57:06
1
b1249c1d3e3390e27f94376067f54d29aa772729414a6018e2f94866834347c7
71
2020-05-22 22:56:25
7
da46ada1da8057c08d2ba6892a1ba287cb172527adf93438e1071c794b7ade77
72
2020-05-13 03:59:07
1
88a8c96ea7cdcbd89318d34a27a8c112b59ab9a98eabc550356c04da9c6d2373
73
2020-05-10 07:43:29
10
2e22f8cf99c434b58d615ed474760035788db697782373bebbefda45020ba619
72
2020-05-07 02:16:22
10
894844d6188e22839a59dcc2cd40959b77909c6c8e6e44d3c0356f2f200782f8
71
2020-05-07 02:00:05
10
c76e7e8f23fe0d4e8efe3cb1406f03bc3ed28b6971e7c9a5f46a7d6b9060c948
70
2020-05-07 01:11:23
1
232a96fb511323c75babfc33ba92a5a47f4b124ecf610b22d806fb2e4d5674a8
73
2020-05-05 23:09:25
3
9eda47d24ca8932ab6b4328c0a1b71aff8aaf59f47a0094eba84e6b2378f3dbc
72
2020-05-05 20:12:30
1
cd2a4379b5c4f67ca361696141578bded8e7ed4ab3d5c3fd543002562b713201
72
2020-05-04 05:40:21
9
434e4f306a9a5495773b0833710b55c1b9c7897952b762ec638105cdea08faf9
72
2020-04-30 03:28:08
4
a981f612d4b4b16d6d0c17c6a5e0b981ba7e5d924b8edd13ea87521ab0cac3aa
73
2020-04-20 22:37:19
1
353b4f28f0d2717c02f8d5cc6299f44b89f6686d552f63801b7489cacff6f4be
72
2020-04-20 22:36:28
1
4c0a110aee732af71191be271132ba942bb951cdedaa163f95e99797d8a66c0c
72
2020-04-20 22:36:18
1
8eb371438fa744bbe31ff4e22426651b8bef2ca845820bbcce94c5117e5dac36
72
2020-04-18 21:08:08
0
9d6af4a2344954c97f8a27b40871df2580f7cd0a6b83564ac503b878c44881ae
71
2020-04-11 18:34:41
5
7a28c5e48aafed1242a0ddcba87e3ed2cb82dbf039895f3a8b5142f627ed7968
69
2020-04-11 18:30:45
4
02346379267dd7dece87b36c1b75fbeb3983ab2d7b28d08662cc1d639ba9ed20
69
2020-04-11 18:27:13
15
8faa4e486d31145a4f24e3adfa9085c5402b6111ef39916ce283a358acc37962
70
2020-04-11 18:24:06
5
bca671a02cffc0ee213b67b02bf0a3e73c4c83fc068fe043630bcf2582adbf36
70
2020-04-11 18:20:06
5
8f38deca2f5139bdb7c7f6a03e88b96f445fa8f2f8dcd9b41fed5ae584945b21
72
2020-04-11 18:14:04
16
f832a4f5688db68c54c0ea207e7b678b2f7daf2c62674d97b20492defc6f0b5a
70
2020-04-11 18:11:44
17
089a7a338fc26c935c907b48c4a9143ea4549cd3c9fe767cc0f595096502a1f4
72
2020-04-11 17:23:04
4
ba335a933341ce33e25fc22995b363aa21fe8c559aca93f06cccabeb44902c76
72
2020-04-11 17:19:23
17
e43a4406191b2ff486f229113f55ccad80e2ae34643335fd775a2b5f9896b6f5
71
2020-04-09 13:15:33
3
3ee3e38fd3c2a06e1c87ef166210d9df64294de262a675a055499070dbb027a9
70
2020-04-09 13:12:36
3
31cc2da19ccb6007bda20448bdf52f193b5fa21de7fdc6b266dcc499aa008fc8
72
2020-04-09 10:31:44
3
a2781fcd4b7673962e074a3fa64d88de5957341cb78aeb57b7a7943138606a62
72
2020-04-09 10:31:00
3
d23551f2c4dd03d8d657f9922dceb4ba3d2575339aa3d4e74d0ac06fdce8adde
72
2020-04-07 13:32:44
11
ed020510b7c84f4abd9f8aa846d505772102a74fd771e07c63dbdf507be76718
72
2020-04-07 13:21:24
20
9cdc974a885362c3bb9a4b3c3c3dcb10aa32b91b343a5a336e16b7632e5bc121
70
2020-04-07 13:16:00
24
a09d60e17f7ea2ec00ed08207941ed6fd8886e493a1c53c0b3f60ee19f578874
69
2020-04-07 13:11:34
20
09b6fab57d49be346ad5632e4a22535dd7792fc56768817add9ad71cb8fb943a
71
2020-04-07 12:53:33
5
eba87f57e4a77eae1d4dd52f9a3294559037fe4001c6eb6ea2021fa00f595ac1
70
2020-03-25 02:00:49
2
b1295d8b0c0af4bd4ad9ed164712db37df491ed442ff16412724eb40289acc15
73
2020-03-21 19:13:08
1
52268c9bd1a0736656e4a93c80244e8857e7e23bbab35a8a018c7bc204fd5f26
72
2020-02-11 23:27:20
2
276676d1603a786997f5f3709306a183c1b473baf85a35a3fec5c625a52bdba9
73
2020-01-04 17:12:44
3
a1860200a80a79b756a9cf5ff7a7a4ec69bf9e8602ff2fd9b941668743c76e5b
73
2020-01-04 17:12:28
8
82ef744186acdbcb519995c1b6237d5d5a4ec9f847f327d17e2b81413f6a1397
62
2020-01-02 23:10:12
19
244fc42b4eb9137c1c9e4476fb4ae4d216020aea06bcf0ad859322b7772e794d
68
2019-12-05 19:28:44
4
d213df4b3755c0f997a393f73ee5a37dd6cfc4ef75aa95b8fa4aea949967046d
70
2019-11-03 22:45:13
7
6ff03b1ef88f6dc1aae53fb114643e07efbdd9565f94b5617217d6e229bb113f
71
2019-11-03 22:34:42
2
fae0cc1366fddaacce5c16943f615f4df74f7997b22ff191af48fdb37c7fd418
69
2019-11-03 14:55:36
7
3a473da091c0c28702b11a11b3bcf243743248d839aef47511c9427e78bdc6c4
70
2019-10-07 14:52:04
19
1ad435606ee96c289c48c8d32044c14bae0f41760249957f9da5e199f13c4504
69
2019-09-30 11:03:04
49
2ba41aa0ba674697fc096cb904207d1dc928d0bdf6b93af4262bdeddd3bc16cf
69
2019-09-28 21:40:36
3
cf88951bd63d865b894ea8274e572b86b5bc7d0cd8983bce1c963d087301ad46
67
2019-09-28 21:39:34
4
a1ff39abfc6f1177868d98be85875d6044b817aaaaf1c2ba76582dec6f8b0b25
71
2019-09-27 01:03:35
7
7718fae843fd02480131a7bfb2eb157a5cfb2b492fe20b862dfa56874af0421d
68
2019-09-17 14:34:10
2
9d5d6271c5b003150c80776e2b3ec28d8e816089c5cad10231c78acf8b2f4ab8
69
2019-09-10 00:59:34
43
d5db66551917510ee4ef1fd282b20876c69b5861b11eb6281c899451acef3f64
69
2019-09-09 08:06:07
47
750e997e3f19e363bb2a657e6106e39a96795ad55b1ca5c1bb4b64055694f7a6
63
2019-09-08 14:26:20
9
0323aec3bcf8bd6bda890061832cdd263b86970e2c8548bf6c1d0ef6749d2db8
70
2019-09-08 14:23:49
1
b1ee90dd2d0cb5609f611ed6fb33a17b28f642f8fb3c158d9268222da9f5c983
64
2019-09-05 08:30:42
45
b83d2c4f5c2bb562981a104d4e49cf25291096d37a4161c32a76e369d1a931e8
67
2019-08-30 22:25:38
38

Rule Matches per Month (last 24 months)