MAL_EXPL_CVE_2026_88771_Oct26

Rule Info

Name
MAL_EXPL_CVE_2026_88771_Oct26
Author
X__Junior
Description
Detects CVE-2026-88771 post-exploitation script
Score
80
Reference
https://github.com/rtkwlf/wolf-tools/tree/main/pack_alerts/202609-citrix-netscaler-active-exploitation-cve-2026-88771
Date
2026-10-02
Minimum Yara
3.5.0
Rule Hash
8fcea41673907b0b193a8f31abec465b
Tags
['SCRIPT', 'MAL', 'CVE_2026_88771', 'EXPLOIT']
Required Modules
[]
Virustotal Matches
https://www.virustotal.com/gui/search/mal_expl_cve_2026_88771_oct26/comments

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
25
Clean (0 engines)
0

Rule Matches

Timestamp
Positives
Total
Hash
VT
2026-10-04 03:47:06
1
62
c627b07b22405fc457704231d3991bfbf2946731f66a4bea59c9baf71a7ac923
2026-10-04 01:14:35
2
62
46a0750dbc66749da439bd14dbae0f90bac6e01cd5264ed7d08094475b39f1d5
2026-10-03 23:15:26
1
62
1fba11d0d461fc9462958decbdbb64997dd8a7ddb9ae86ce8f8677f348223a17
2026-10-03 22:50:46
2
62
2e7ae2d1335af96efb72deb61feddbaea8be99367a96bfd5bae8ae3ea585fc8c
2026-10-03 19:36:36
1
60
6b70bc69001cbce483a5f8528c430f6c67eecafca55501bcb50cfcbf30f45e32
2026-10-03 12:43:26
1
62
74da9485815ee124e2ebe155dbcfb758b54bd97760956998abf64838c865f78b
2026-10-03 10:29:37
1
62
899299dcaa6531e450cfc844f7948bc3180c6cbebc43cf751e65ee261f6732cd
2026-10-03 10:03:46
2
62
602b859d38c02c559f62e5c6f7ba30265b2ffd7faf528a3b0151727c7a1dc2d3
2026-10-03 06:58:56
1
62
0a7f88a74e82725e8ceaf9aa0b25b43c43105ff7653b29a0cbba94ce40b04447
2026-10-03 06:51:56
1
62
d04663bdab3183c94381d19eec7af59f90890497d5ad95c7af1c00d0fe8901dc
2026-10-03 04:33:06
1
61
4b0c3ebbe916831371b16cc4226079b6abde97245f24e5aa868a9786d4b2a152
2026-10-03 04:32:03
1
61
7b950ea7e16faa3348b735460805486a375797cc7e7df2ef775c5a676c057e7a
2026-10-03 04:00:28
1
62
12ff1448594844ffe072674e4da36c2bb92bce19bfdf494bcae0542ce6e1731a
2026-10-03 00:53:55
1
62
b9bc8d87ef77f63082445f5664e02a84db568f6d8147e077b97dc15df9f2a36b
2026-10-03 00:39:28
1
62
83307fb218b557a0a1cab46e094b038f9b795d2d02bd04ac7ce4e0d3eb4ec8c3
2026-10-03 00:39:15
1
62
12b15fe585a21d33eeb863fc5a246596225a77185a314d55de3c980bbe11e9c0
2026-10-03 00:20:16
1
62
ec6d42cc99e3c7870dc11606643e8b296e4aadafaf886f05506e1f515aa55eee
2026-10-02 23:05:28
1
61
10517f49ef2fc81ffde667fd300b2677749b9c1604b7c35379535bf0d9bf6833
2026-10-02 22:49:55
2
62
974b69782fdf5d67b97cfd508465939e44ee10798dbcc1e82b92d78776bad938
2026-10-02 20:48:26
1
61
767f2c349857b42157cd7a73ce8223f4f6ac9135d63b1321960df8570bf0f3a8
2026-10-02 20:29:35
1
61
b9b0a4380db462c706597bd3e6a08d4d99fcbbf0919d63eb99b488d396c8ce63
2026-10-02 19:52:48
1
61
72cff13fcba75504485e94fa6bfc5e9363e860f49efdba68feb583148eec38f2
2026-10-02 19:50:56
2
55
53e61abcf0dcb9de2044968c5e72e60c03df2e485b1aaf8581e7268a8486a6a1
2026-10-02 19:33:29
1
62
740daa04c2f66eede7576b11a57dc11a1ddb5896244ed6d3cc428bd134d7425f
2026-10-02 19:14:36
1
59
e8f594f94965ac4d51c89e99d4c5026fe6f64503ffd63a82fb465b9aa62b8740

Rule Matches per Month (last 24 months)

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022