MAL_DOC_ZLoader_Oct20_1

Rule Info

Date
2020-10-10
Av Ratio
0.98
Rule Hash
c508d5f643cb597c1f06aba45ed06497
Score
75
Description
Detects weaponized ZLoader documents
Name
MAL_DOC_ZLoader_Oct20_1
Required Modules
[]
Tags
['DEMO', 'FILE', 'MAL']
Author
Florian Roth
Minimum Yara
1.7

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
1
Suspicious (< 10 engines)
14
Clean (0 engines)
62

Rule Matches

Hash
Total
Timestamp
Positives
VT
579c38c1ee96da830021aab599c39013989750daf4a207283f02e3853c043054
58
2020-10-20 22:58:23
0
de58068477e8de9e54818caf6c0ca76a16ed90c1cb63e5cfe72138a19e37508a
60
2020-10-20 18:51:33
1
80e9a084a736308207f0e3f6fe3f32dddfbbe7a893d97809204a4c72a58e8f50
36
2020-10-20 10:51:08
0
7e29dcd2818bd69b26401e7eb35590868e66b858ffee8b62ebe39c6473b5fbf0
61
2020-10-19 17:46:25
1
29977ef7af4006264e3a878bfd02efb5e0f2e23be0b2bf7f3103aa7a309a1d23
55
2020-10-19 08:36:08
0
0e56eab85b981c4861d0b20214edd786a69754bcc16b8285f21c1746aeea7fd6
61
2020-10-16 16:57:18
0
65a1465b90e66f5c0a25fef54cac4d914b1c5d93c9682a1c6294e2de0a37b3e5
61
2020-10-15 16:41:04
0
668ca7ede54664360b0a44d5e19e76beb92c19659a8dec0e7085d05528df42b5
61
2020-10-15 11:14:08
4
4ece54fb620e3f923cddbaf454f2d5af49e8dcd5dc7b28bd27d49ad38989c605
61
2020-10-14 22:22:00
0
7344b5b905418fccfa1e4b6f30b165430baa263c6f95b7028e62e14d7ec607f9
61
2020-10-14 22:15:27
0
7a951c65f7a8e5d46e5aa7ceb814156f11e7163bb4b2e3f8c03da6c9cbae2e03
61
2020-10-14 19:03:09
4
62a80b0bd1204b6348d39f96810ec7686a7f157a388a37d4655223822a4158dd
60
2020-10-14 17:35:06
0
c5f8dfb582f185207b615ee50032b271754d8d81f04ad790d83540b13124059e
60
2020-10-14 14:41:26
0
941436c8a53a34889da76d53775a3c4bac3c65ec64b145c44fd283870e764ee9
60
2020-10-14 02:02:12
0
2f4f9de0d6ef251fa08238b21d815f4b5faed37c7ac3d19f0cab0484b57c9b4d
60
2020-10-14 02:01:15
0
b568bb8845aa0eabfa8a60af2b55badbccdf8ea0819475251b849c5de544cf28
57
2020-10-13 23:35:57
0
a36f1c9c80383bac0f4ba6e32a7854fb7959352b003942c12a437614ac657596
60
2020-10-13 22:08:28
0
dbcc7374f97810d5e188c2bc1e0a73b386b1209421819a2f4e2e478a585fc653
60
2020-10-13 20:36:06
0
e7a45a097f774d499f6aa5b616f38f5ec307ff426903a8ba14124ea6ab1e581b
60
2020-10-13 20:22:59
0
4f648d13fc3ccf3df52708ae68bee15bd4117e2eb577e80546ea3d4c1ed52ee2
60
2020-10-13 19:46:42
0
5350729504e1c2b6de75cedc722252c89ba0289970de42fd1374dbaa59a2c034
60
2020-10-13 19:14:21
0
ac8e0d5681233e10a471c3f57c873b33afd2965b7b191e45457b13bbbc3bc5ca
60
2020-10-13 18:56:54
0
e9311a3e61ca48c69f1acfbf623473f627e7af9d9734cff28e99bf662aa86bca
60
2020-10-13 17:35:58
0
b13ce5615519652fcbc2773cd49b938c2c560a0fea6f78eac1c9ee8074427c7a
59
2020-10-13 17:09:27
0
84df21a0efc9ae8a0b12ab6f8d51ea8f9a068efb4779aff19a07881735e711d7
58
2020-10-13 17:07:25
0
0a73a7de3ec5dcb6e76a1907338d7e8dd9dfe93cac3b20a9c04811a7e63fdabc
60
2020-10-13 17:01:33
0
e707b93d322289d1b3a4a2cfbac07da60d1228042cf34206df9042299fcc4cda
60
2020-10-13 16:10:29
0
9744207746c428a27821e46a955ed28c063434456067ddbfc310bf4c998903ef
58
2020-10-13 15:11:46
3
8257663d61277d20aa2fecf3e54a6a04a135919b14c97590a3cd1022c0e4590c
60
2020-10-13 14:24:36
3
c54c8f841c49db22a43f56415049b70c946ddeab14ea65de36339d24030eccea
60
2020-10-13 09:09:45
0
f463e2d25e2e16ed07819a122d8d3ceb83c491138abf867770ac77daed9f1361
59
2020-10-13 09:06:10
0
df553a2b3819cc4cb04aa6eb65c2d745dac86131dbeb112ab75be93521408b9b
60
2020-10-13 05:07:42
0
c2c0baf90052bfaefd3b28b5801d341284ba83013e1e89d4493952b9c74a0e9c
59
2020-10-13 02:59:10
0
e852f4599fad23eeb123a6a18fa4d16a85af05579396be6f9a0c38f7acb58302
60
2020-10-13 02:41:40
0
aaf71a015b73ed11ee126c95e96ab2472d883ec4bae3e9941ee02a15dae67085
60
2020-10-12 23:57:02
0
c33a42a96a8aff19990cd473222ab0c616fc3c921d0f1907159dc6d91ab946fb
60
2020-10-12 23:55:28
0
f6cdaf9aaa8ae43d4b5fab8c5a47f463e176d9ba3526788fa6fc21fe84fa8257
59
2020-10-12 23:50:31
1
652c678f8ccbde5644afef0aea4402db4693834a6baba7fd3fb11bbe9c74e8f4
59
2020-10-12 23:40:28
0
492b25cb1b1fe5a0af7d071ed0fe2d6f4f5632fa681a7619ef6f2470ceaff133
60
2020-10-12 22:51:15
0
8bab128f44b9a83e6b8d18741d0cc57f79516550f72365660ed2a7c93eabd4ea
59
2020-10-12 22:22:30
0
27fc8008e99dbaf2060df138bce557a7f69578bb2acceb35d90dab4f0d66cd18
60
2020-10-12 21:48:29
0
6ee35f153b4908544a5f815824c8be4a2142e111982e37020800ea827bc98b1e
60
2020-10-12 21:44:17
0
f42688473e19b40d262398111107850b0322e1387114ae28883b82889c35b113
60
2020-10-12 21:43:24
0
2d525a7010ea242e5d1625f4d6a14a5dc9247eb33371d2837ffcf8ad5d1b879b
60
2020-10-12 21:39:11
0
046674c599a46701b2284ec4993e85be846239133072ddf4d4858b34fb51a47d
60
2020-10-12 21:08:18
0
f10501d8737dd2c3fcf1de512a838bd4dbaee67a33eab9d6241ad8c6eff86a65
59
2020-10-12 21:06:21
0
b8048f7e00f62e993460f60f5f14641e66884cb48e8edeffb302a810b781e255
59
2020-10-12 21:05:58
0
815257c0a3366c33059f172d261794a7ab698f7bfaa176cc1034467ba7d6c30e
59
2020-10-12 19:46:32
0
30489149dab201c75dc26be68df6c3e72e5dccb0954d363780c51f38825a75aa
60
2020-10-12 19:02:09
0
746821d9e15584b0421dd9a839129c2c210afa0910e022634d034c2eba7a3a77
57
2020-10-12 18:43:28
0
e611fa60cb23d4b6e70c617bd80e931a75f173ab1d12b64b4905e64732658115
59
2020-10-12 18:16:03
0
4c48f63ba7327bde3ceccc7838a81f6501a327da8e550db1f51baa51472cd961
59
2020-10-12 18:13:04
0
da1999c23ee2dae02a169fd2208b9766cb8f046a895f5f52bed45615eea94da0
58
2020-10-12 18:01:27
3
2c22237881b162d88d87a9b8b72afc70aa2274c2fa427ffdf89fde81a2c4d9fa
60
2020-10-12 18:00:57
0
5738d6a94c9affe6d17aff5fb37da1685f109c5d231aeeb0ad175e02b36eefeb
59
2020-10-12 17:55:11
0
db79e0f38c0894477dfa8ac83e82fea3561ae97d814955372b95d4c2bd352f32
60
2020-10-12 15:40:38
0
09690f58625b247684388dd81e6b264a2fcbf18271bf21a0d827f16139afe910
60
2020-10-12 14:17:20
0
28501583ee6f53ea66dfe3925c8a16ebef4820c01d43bb4c53069b9be2973d5f
60
2020-10-12 13:57:25
1
960a3a2cc5166ac483baa974591dc5fc8ff223d12997c0b9f671874f7b422c91
60
2020-10-12 13:23:08
0
0e334135f0bc0e6832c50ec2fe3681816fd63a1843214a433cc92f59e77a4247
59
2020-10-12 12:51:38
0
ba51cbdb7039f1b1bcda2a38e32b8d1e31b7ba58048cf50865f2c0732132126a
59
2020-10-12 12:03:11
0
92859da9f5ec97c9c7646122138e996bb57021bb9fdee295f5ddb960390682e4
60
2020-10-12 11:44:09
0
cd7fa011f7de6e0e7ac07e5aad80716965c5b59dda40ad2050065465e9a0b69a
59
2020-10-12 10:05:57
0
b2291c311ffcaeea4387bb0689e381219c580898f6e64d134b4b2c92a4996b08
60
2020-10-12 09:52:28
0
307ea21a8cba83a8d7e58ebbd131a63cb8ae3d2281bd7a93004d8be78b70107e
59
2020-10-12 09:14:56
0
1bcf2d09a64a536efa4831600d00c6daad6b1751fa6d2ae111a7abb7ff0b61bb
60
2020-10-12 09:03:26
0
6fd9496a55cebce0b5bbee44ffd6a8d510d5ee13119a91de65e7964f89f8ac09
59
2020-10-11 16:54:47
10
0034b84aaab5c34f63bdc185244440aeafb42b567f4eade644fd4a04d85a7af0
60
2020-10-11 14:26:29
4
e3ab371b9e086a7bd33745c142a61c32261b8e7f89a5f5f4fa61986f4fbc5b61
60
2020-10-11 13:19:41
0
c7a11fec758af122c76c3662097928a6e7bfbc967ed5317423118b414908ddae
60
2020-10-11 09:21:38
1
0fba7996f3743a6d505db6b9da852d54c460d0e8f08203286629af7555493dcb
60
2020-10-11 02:41:02
0
8fdf406c3c4a11feac4587208b41f27668d7d31316afbe57954d178e56928049
59
2020-10-11 01:17:06
0
4e40253b382b20e273edf82362f1c89e916f7ab8d3c518818a76cb6127d4e7c2
59
2020-10-10 23:41:01
3
f402cca6761f6157272f1162055adaeddc75c8402433fa6a75fd2754de51399e
59
2020-10-10 22:17:08
2
399ce554bff9fab8e6e51990eebd5ce7e537ca84aaf1efa241fd9a9a3a25a104
60
2020-10-10 21:25:32
0
0f69a102fc0b7a2d8e90df25000705142fd2e0c83bfb24da727e05d4049be38f
60
2020-10-10 19:27:40
4
504874630703d4ec3826dc66828977fe253947affdbcde6db489f10cc2f3821b
55
2020-10-10 19:20:02
0

Rule Matches per Month (last 24 months)