MAL_Payload_F5_BIG_IP_Exploitations_Jul20_1

Rule Info

Rule Hash
58de6d14437d29d0fa4ee278dfb15f01
Score
75
Tags
['DEMO', 'MAL', 'T1136', 'T1105', 'EXPLOIT']
Name
MAL_Payload_F5_BIG_IP_Exploitations_Jul20_1
Date
2020-06-07
Required Modules
[]
Author
Florian Roth
Description
Detects code found in report on exploits against CVE-2020-5902 F5 BIG-IP vulnerability by NCC group
Minimum Yara
1.7
Av Ratio
29.85

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
136
Suspicious (< 10 engines)
16
Clean (0 engines)
5

Rule Matches

Hash
Total
Timestamp
Positives
VT
2b7666ffc8a4df0ebef826117a7a2cacc1c81e2c31205157fd3c0778a11c467e
58
2020-08-03 11:28:51
12
02e799f6b99c4bd845488633657806ade1c0b52a7d9691fb9cf87bc42366ec65
59
2020-07-30 05:38:53
10
594b4657c4fdf22e3a7d5c7f7bf282b125e143ddd19b0e2957e644e6d96c8867
59
2020-07-29 16:14:07
9
2f514b01cc41d9c2185264e71bd5e5b1f27a7deb6d0074bd454d26390131ef04
57
2020-07-29 13:41:24
10
16f094d6f6f5c58daca9055a724986ee031dd3a775619b0923d932d159f36860
55
2020-07-29 04:55:41
10
5e4dc27d04490b479b263110952c0f60cb982378affbb3b4c2d37e34a320d73d
59
2020-07-28 16:23:48
9
5ae1eb206dff65c9feb6684240c7fbbe632b64e90ef34b19a178c75da42d8ae9
58
2020-07-28 10:32:30
11
086c10cfb9f315d3558f792f376e61bb6c894ef8d6580c7ac0c3958050b735ce
54
2020-07-28 06:37:18
10
83269b479fbabc13764a9ea0680b4bb1f381e1fc5199181ebed4b6eb5c8d4669
59
2020-07-27 03:51:15
10
e0e8d9f09004934376aa626b1fb1457b6f1b806848a9caa06ae0bd93c946b2f4
59
2020-07-27 03:44:27
10
b91e3ae2f4c7964a14f4ec432b31f6090cb22165c33dd1397692f7e3ce1335bc
59
2020-07-23 18:27:13
4
e2a7445ca38d76df900742a54417b06df438119ab5f3ee19e91924f24c28b3f3
59
2020-07-23 18:21:44
3
210f693a17226baf141e38e3172a3a8300c966d6b65574465304181491f0281a
59
2020-07-23 05:31:11
0
d99cb5b6aff49021cc02f3dc5561752ba25d281881fddc8ada6ea094dc079a93
34
2020-07-22 15:43:03
14
607f1cc5bb4f541bfc5048415b31b6ebee7c69e5c158635854519a43a42ead40
59
2020-07-21 20:59:47
3
9edde90037cab47dfef5165235ee75a4911cb4191c1a48e2f9a9314ad9c2b502
60
2020-07-20 08:27:14
8
6f4ffd78c4d458586fa3be29eda88b846d8b054d074e3b0df6dec086e462162d
59
2020-07-17 04:40:07
8
34e0ad00a23762da270ad5a352d1e523f45a685b4a4931ae02973ecef79140c5
59
2020-07-16 16:12:35
6
df89fc574aff10050d498eb1594c633e60e81b732849958ad58333a6c0cc0cdd
59
2020-07-16 11:04:40
3
97b68f0c40ca46604d32b3990f2f7cd078775aebe1798ac250dff20c354adf8c
59
2020-07-13 18:43:47
0
b84e285f215567b227ccb6ea930a7ceed94d9c47a1b7e988923dadf189ef8899
59
2020-07-13 12:07:30
0
0de90b6466c430e9f0ff8fd46223bfecb6ad1815c59b07551e41055525a169db
58
2020-07-13 06:49:39
19
8834b9640eca8f8afac8742b906c9c7c312f2d88dba499585efe99e47ae2d1ac
59
2020-07-13 06:48:55
20
aeff3a1d3f5255f74b976d3ea372b722389ee46b8c0a0a4035a5706e398fbdc5
59
2020-07-13 06:48:41
20
1eb02ec7e2d0dbf78d87adca8d4028b8b52e76dc0853eb3d244336d9dda43f53
60
2020-07-13 06:46:57
20
768e8aa7456467e0e3fd3ea449d549795c33ab688d05a0d2cb2204ecda915039
59
2020-07-13 06:46:53
15
76d4dae6f2c425e843b4db7bdcfc80997bc26df12c90fbd605508d268bb2ea69
59
2020-07-13 06:38:43
20
ee5e388e01439d2f2d4fa9e1b211395e10f2f98dd76db50ccbab008589650f42
60
2020-07-12 16:43:48
0
06dd47f1726bef4cf5da4125403ee67e7a42008260e978e31656e7fcd2391086
59
2020-07-11 15:09:39
21
9631f81c42d1eb2b6b4f10104d65ca64bf440e58ead6551b2987692ff8b9ce09
59
2020-07-10 00:06:43
10
8806a51eedd69562381b6a4bf7b5de2a3f3fa107d1478e36243c918b919b26ef
60
2020-07-09 21:11:51
24
104ed218b4713af5428d7178d701a6b815b775e57da5d82d42a54871da3768b3
60
2020-07-09 15:04:52
20
d800ac7d4b7ddb5737fdd23fe898daa25ebaf0f190bf40136e4f6c9d9ee4a5af
60
2020-07-09 06:21:18
35
27dff8fbafcd86e1640f897d824dec91cbfe415aab9a6242a8ce9120d34d74cd
46
2020-07-08 21:21:35
14
b4858668cb3f0354cc8233e0f9bc21c66747434639bd5c5391378e9d95afb25f
46
2020-07-08 21:21:35
14
a4c4c8650fa5e973b5dfdfb4d634afd251d16fa8a462e970b916ec6e4c4817d6
60
2020-07-08 21:20:57
22
808960403a023a5365d99bd1c7cbf3801792c23c18b07185d02acff873abff39
60
2020-07-08 21:20:49
21
8a1163ac31586ae5634c67519ecce411129e75468a9b140e4e0b63ecbea4a150
59
2020-07-08 21:20:49
11
5f4f33637e336788d736d7f73f5111774f00249c3b869fae61a87af901a2d84d
59
2020-07-08 21:20:42
21
4a279c17a6b0f2159be8cb2ed15fb05dd61053d022193166a0ce20596525495c
59
2020-07-08 21:20:34
4
a9effca4409f5a0d22e5c57724f6f44af089139682db88c7402bcce5b04bee20
60
2020-07-08 21:20:33
14
dbfdd8d8c260d6f3a8ad1abc245d5e92d388df76a58a10542ecc03f3797beb01
57
2020-07-08 21:20:18
16
24a3b042120e10f00a3b3878b4001153ea5cef2bf2cf993b733b4b50dbf29f51
60
2020-07-08 21:20:12
21
77f0c22a163a364039d311ee97751c0d449c84cc69d60d543b5dc8f704375933
59
2020-07-08 21:20:11
14
9fb0dad941505b5917935059601a7cee90dbc25e80ba82f00d67832bd29e8172
59
2020-07-08 21:20:11
21
865a1b8a167bb7411f94e42ebf7f8cda0f597df93f1f111bc6d0274561193042
60
2020-07-08 21:20:10
26
eb385a54211d4652c1af9806ade65b5648ae6e511afc6d2a5895aeacf2b5ac84
60
2020-07-08 21:20:04
24
ef654c32cf48754439f618b75f547633911a504cd54bad6329f451a91a7124a8
60
2020-07-08 21:20:04
19
8fbc285b9060b17fd83202d89889ecf2f3ba0d96c18b8bda9dc2656aea889aa4
60
2020-07-08 21:20:04
26
eb01f92152a274925ae976d9f2ac1e3fb0686800adaf65f0f6a5f9e08591fed6
60
2020-07-08 21:20:03
22
42f45729b365c36cf88a725772222fd4b427b6671ef314efe686a6fbdb7e6d61
59
2020-07-08 21:20:03
23
f1aefee2cbb5d8d272832a666d35cb4ee54f591553dd13b86198324d227fe975
60
2020-07-08 21:19:56
27
91556d067cb429a2602401c81ad06216774308d0f6e73bdf7309c23cdeab296c
60
2020-07-08 21:19:56
16
acfc91225226a1de27da66b5837e1f716c2a0891458980ac4d029dbadb902dbd
60
2020-07-08 21:19:56
22
9f6e850fe87572cc3b5cb685b9dddfcbb7ab464065e535eed24b503e74a7edb2
60
2020-07-08 21:19:56
21
62cd584ee1632b9c700baa7588016b347acc5c9135e6e1fec0fea8441d2fd592
60
2020-07-08 21:19:56
21
74ef9745bcdf4f728732c221abac171bc53162105a2b52f1399fa308bd5e943a
58
2020-07-08 21:19:50
20
9e0812bc9e4a3c0a3964a86cd51335fa169a213c2dc0d717b28a3a2a40db2ed5
60
2020-07-08 21:19:50
22
cf02f62122d14a1adaeb77e8443dc065afee3124f5e9c8519a1406ba074ac347
58
2020-07-08 21:19:50
14
9ab949faa5162a026d0cd9cfdf75fa3eb07fe1645889988b13a275312d320035
60
2020-07-08 21:19:50
22
826e3f82c53404ecf88b708af1908c6d884114bf9b1318b973093811a1b51509
60
2020-07-08 21:19:50
15
044880d3811d228eb345bc644cb0c281d5f2d13dfd52dbe925ecba67a158dbd4
60
2020-07-08 21:19:49
16
0455858c81d0c303d906c6752a118129e71d535b62297dc7110b4c70b67bbecc
59
2020-07-08 21:19:42
28
273426edfd5aae0be891a02f0daf65ca813c786dc6b777e84e63793b11be2d02
60
2020-07-08 21:19:42
21
903b9a4628dd42ed5a868ad45aa77bbd231e9b9b6f2c8724d809ba272f579b70
60
2020-07-08 21:19:41
26
84bca49c1384228630759389092fc1d1f4909530f3de5d27821f5a430d52354b
59
2020-07-08 21:19:35
19
07dcc0664ca1f0be63e09934860df3ca9a7446610b3bfd6823d2625ba01d5bc5
59
2020-07-08 21:19:35
21
86a7c16835e8040f1fa75513e0f5f5d2df54890b9571d2c882a712c975340a1f
60
2020-07-08 21:19:35
17
b8d65b51bf7e8e4bc25f83c9af309be3e4376b94f26902b2479a9f2eccc3a4cd
60
2020-07-08 21:19:34
28
a576346837bbabb7b730c7e149531d43ef308799a0d85b64248b523932be2a11
59
2020-07-08 21:19:34
29
630a7fed48f07ea884f285e4ead4632913f59b05d057bbb60843e371782e7768
60
2020-07-08 21:19:34
16
bb72ae8bad00e2b799c9b09c46a31889128c475036708279d0f81203aacc91ab
60
2020-07-08 21:19:34
22
6d95088ba5e67b6c9fdce6faf6cc8167d6efb4f122b20897525bc1ecd978e87f
60
2020-07-08 21:19:29
14
7ffeb8629acec8695dee70df0cb312b38b2b6eb431f47e82a860406fc30b6381
60
2020-07-08 21:19:29
23
cdc1b79e7c52b5a659b8bf46f7509370b503d774983937a305dcf4828c87e975
60
2020-07-08 21:19:29
22
4663624303c612d879f1cb068a95cded2f08dca2423d1952f10edbebdbdbf6de
58
2020-07-08 21:19:28
21
c9753c2ea0472a0bedf2ec57651d8c01fc781b599bef412f3da96893f6023fa8
60
2020-07-08 21:19:28
22
bf705ebc2325dba78615578e3a7edb99d295afa058d1dc02cfaa2d00bdff8a31
59
2020-07-08 21:19:28
21
98c75bf33388e69b6f0f428cf1cd2ddd0fcfa61a36a100043b18593b60581ac7
58
2020-07-08 21:19:28
28
04f90c6940b6212d503ff1a92990404aadf160c5ddfb20e1db4ad79e3d099759
60
2020-07-08 21:19:27
29
8f4903022478ba6a961ecbbc43d5a7b44a6e8dcd1b08ae7ba31afcee19c5b646
58
2020-07-08 21:19:27
20
479a1836c12f65b21db6b283b8ba277b8e24e3870e80f85f4250ded083a978cb
59
2020-07-08 21:19:22
21
86fef9223320b1fce31a2ac4edde7b72c10fe4b72631e25f4d2b16f211bb0a29
60
2020-07-08 21:19:22
22
7a2da6862a6fab99e46f0dc176198f1716fb665f21bf994a9a3ce46f876173d8
60
2020-07-08 21:19:21
21
8423bef62726d15bdb74a8834831f49f60d065dcb467601f17c1c0b024fd1ca5
60
2020-07-08 21:19:20
14
1fdf29cafb8bd7c4283bc72e299cd2565bceba9a1194dc95f39daad471015746
60
2020-07-08 21:19:20
14
9545d54ddf45fb2145ff135ecf5176648c3ec882f50efc1d35e996f4c946f8b5
60
2020-07-08 21:19:13
12
c964f786988a8e17688e320279bdb45ba7bb34c756647ee2ecd81dd7132fef95
59
2020-07-08 21:19:08
22
41f35f8db4ab436260d53d1a1555237219a51ab51cbe3cdfb1300ecd4d35c110
59
2020-07-08 21:19:07
22
c1acf93c17feafe5c18c6b71315e85a447777926289747a4d531af882c1ba32c
58
2020-07-08 21:19:07
29
328485abfc623514aab0599396c70569ff218ab8bb4db4840b04c8f100055d5d
59
2020-07-08 21:19:07
21
cfe11e4a635b853abb2e2e52335bc6cacb2ce1cc059433baf57ee23c08863776
59
2020-07-08 21:19:07
22
d21918e0901380a88c789607f4927216b8dcd6f5ca1ec1a30eef5f5dfbc34053
60
2020-07-08 21:19:07
21
acbef58dea5f4aba6871611a9a57aa04d1e441bb8b2dc1c4213d5a8a6b3e2d4f
59
2020-07-08 21:19:06
29
0b795cc9137177bc6d61c0cdccf6aecd535bdf55e2b5d2e8cc5fa82f591bbba0
58
2020-07-08 21:19:06
20
0b2a5750529f2ec48178d26c791a2f55833150b390b9d48cc20f8d420b03b399
59
2020-07-08 21:19:05
29
1e53097c5abdbc20311b2c19425d1da575a5bc12a29d2a958785ba4c5aa569fe
59
2020-07-08 21:18:58
27
39df5478e3a48b7b65faf4a33ec79fcccd6b6b5a6067e9883108b5d7dc625c7c
59
2020-07-08 21:18:58
21
96589ba7818fae9282b7f69920b7e42b9847e24b7eadc76d6702cbfa293aa43e
60
2020-07-08 21:18:58
24
41d58574859851fa88fa5531de647f9f54c397bdd4d5415e9a768f5efc75b3c2
59
2020-07-08 21:18:58
21
d79257d9702eb997cc1d748512a22eeeede9d1094fafb79a0b30135443c4ed40
59
2020-07-08 21:18:53
21
448eb1100e9c87db4fc7cd0a00583896a2028a7ca697f19a8f17c218cfc4131a
59
2020-07-08 21:18:52
27
3357992f7cfc355ebbeff77f95cd4ff5a0459d099aff84b6b2fdcce0a195eb63
59
2020-07-08 21:18:52
21
cc2c70f314c77632951ef57359d373c1500558b08fd5749dd46b88a16b66b77d
60
2020-07-08 21:18:51
19
23d6aa20c08806bec04f9372aaffa7a6c70a5d5db9c984af2c4311f5f7c00203
59
2020-07-08 21:18:51
21
1db3c58db3c2dd8668c7a09d2366bc5b11b965b63836fe8e353564659c74dfe7
59
2020-07-08 21:18:51
16
37aacc3553b1ac508abe8bad5b35e3009bf9cd688ffb64ebdbfb1487ce17408d
58
2020-07-08 21:18:50
11
536a1e7a2f7722a7ca331938391d1d25c24d83da39fef4d4220a142923a47480
59
2020-07-08 21:18:45
29
cd4d7e38b74223b010d1aed9abb0b10b71396ce9592634cbddaa309e75a16fd7
59
2020-07-08 21:18:45
18
485f1354363ae198ce46d20cf8f525568ab391d60d5f6f83267bc3a3cf247779
60
2020-07-08 21:18:45
8
dc0e565d2ae1a7ab1fce3315017809f89358142ef689531ec07bcf89267143fd
60
2020-07-08 21:18:44
24
e1861ad8bb0319a00e7468d32e0e5257c8803d18619901914a3cfd167d02528a
59
2020-07-08 21:18:44
21
7a0a1a156b4902d9c7edf783e1c5f774e31614a58b778db8f7d6feca3e2c52c1
59
2020-07-08 21:18:37
21
6c8c0ee103fff24057d2314dd8671994e6fe7af5a807f480fc595fcaba5075e5
59
2020-07-08 21:18:37
21
4e3d30e46148a1d6e381a4b61a35bb3e04295269a2f1198bd0b9f53f8ea078a4
59
2020-07-08 21:18:37
20
dc82a5dd66e0fc4b5074c5ad3031986fb934b5980ea5139a12b7332266033ee7
59
2020-07-08 21:18:37
22
ff3c0cb8d31360699ec56f1b9f11aa86cb69649ac2f747cdd3b7893b04861f75
60
2020-07-08 21:18:36
30
34d7a6113b596fc4f9635e1d1dae5db353437a7b1b890560a65f0e1d6542c553
59
2020-07-08 21:18:36
22
9d3ecfce98d1e6adf77c3132cefea45c8c82e8988f34ff874c1e93799e7fd59d
60
2020-07-08 21:18:30
27
ea14c21e9d543069ff6d38b7148f17bc3b109ec18b2f876ea77f6676ac89a8fc
60
2020-07-08 21:18:29
25
4d589a7e4ba516a72803a8922b29e613ff1e0b8572d42ce30ca65669d89ffb0f
59
2020-07-08 21:18:29
22
823c4676904061c6fe7994b543afb6d33f987c99d82ca3fd89c9fe6bd8d1dcdf
60
2020-07-08 21:18:28
15
cf92725dc061511f72951a58d76f6c511d58701d43a7c71c0d02488192b7a457
60
2020-07-08 21:18:28
22
04f7dfc4038f8d8beecc77252dc6e2210f91eeda2a7582be80c1b45a76da070f
58
2020-07-08 21:18:28
20
ffddbfb3247aa6a5fe1b2a57a115092a34ccdee84abafe2902d0076b2be6d8e5
59
2020-07-08 21:18:28
22
2d5745d7933ddef30461e6ecbbb1b769bc0831adf98652e4d175c3578a4dd1ac
60
2020-07-08 21:18:28
13
ffb4d221aff467d40c3e09c61bf563a2690c7414ea419d3914bebcedc7e7ab55
59
2020-07-08 21:18:22
22
3d8a14202f819c9cb1d1021fb0c838f469e54512853132364ed2866a233b93c7
60
2020-07-08 21:18:22
27
d6a2f7cb8f9149f9cc29b63577c5c75fecef8826f3be751eb37a1d7104445fa7
60
2020-07-08 21:18:21
27
a74140a48d07d3f852110dd1d7170a6880d92c68f0a0b254b5a30169e98660ec
59
2020-07-08 21:18:21
17
d9432634ee4b64beef4172a8abed4f2d0e585196eb4094f032244b61607edd56
59
2020-07-08 21:18:21
21
4bdfc70146f393ac464a1a930148f122999092aa7c8b1620e7b4ea3a6e18b4a1
59
2020-07-08 21:18:21
13
11a10e0047f7cd02edc7b7f10d14dbcff5097fae70e4e4b3bf0cb5c5b53812e0
59
2020-07-08 21:18:15
21
5a95dbd65e476c0655603c4e033ee9d9e4c221a219be4d1ba21badbc38838368
60
2020-07-08 21:18:15
14
6c05cc59e075ecd439f897a0fd21189b1f24b23489a304b0cb6c0bc1a1585c0e
60
2020-07-08 21:18:15
12
055d5e5a22dbcae39828feaefaf9ca1aaeb4fb4140ebbbeaa9c2fb1910753e3c
60
2020-07-08 21:18:15
22
5ed04e281d688f332c822aff61a22a71e642d6bbbe534c7e04c482f00353d1fc
60
2020-07-08 21:18:14
12
2c463502f1e293288e481b263d8390da5d64713c8275d3e9a3411ed8bf787918
60
2020-07-08 21:18:07
10
240fbb6e7549a387bff62ddab022fb0477f29d288e735bc4a37db4300e4b58fe
60
2020-07-08 21:17:58
21
7c7430ad0534066221c5cffdd0a0c342c960218615ffc2bad578c7d099908679
60
2020-07-08 21:17:57
21
e3b28217fe19c3d349abe6801bebff60f02eac5d148e9ded7f2f54b54e4140d6
60
2020-07-08 21:17:50
19
5f7eeb86f8b99d9be739d4b3e4f0b50c3d9cdb0fd5ad451b60a88a5047259412
60
2020-07-08 21:17:50
14
6b631a1551f84aeaeea6b248f40e78f8a2722426712f81afc90bed9325a4f32a
60
2020-07-08 21:17:49
14
9e750f37fcfd5ad2dfa8e0156bb3b9fffd675aff8bd759996112b8a524ed244c
60
2020-07-08 21:17:49
12
792e0f9ff89adc375b7eb450ccd06de59ca0ed1c1af9aaaa79f38d3599ab0a9c
60
2020-07-08 21:17:48
26
dec3949b8738d308f9065c63caccd6974d19710dd9f838ede9fb13c9f1fab8da
60
2020-07-08 21:17:42
21
0ada474f97a445be4f6a070986aad18d4c25849a37a9f42025aea24236dd198e
60
2020-07-08 21:17:33
14
7819d608bc25c4f677dd75e8b4d9897fd3bdfe8805a68be30e6d275389938072
60
2020-07-08 21:17:25
22
ae1a6dc606dab687970b5f918ec55d34699a75cc6bc232e5cdc7fd8ac0292c7a
60
2020-07-08 21:17:18
14
9994a3ab51521ee54902826d46de3f8c541e625873f10aec2568dd51ddf78f9c
58
2020-07-08 20:14:13
1
c73c876c7f3251d9b7428585eeabc0b050c2ff057db2058eaae233e696cf3eac
58
2020-07-08 20:13:45
18
78bd900150fc255e858eb0a01eea3e7599014229f4b2cf1cf7f7cdb5553ae9d1
59
2020-07-08 20:12:29
20
0a1af384c340fbe681f922f9c19b20b46807545e4c011942dc0ddfcb8d2f2bfe
59
2020-07-08 20:12:13
2
cdc377df83282b781145f23a6b51687f18a862c8d0125e91a5f369bdc806dd23
59
2020-07-08 18:56:52
2
b5ec26f49e224b90af1a6ce5b343c1951202caab181a7d0fb053f7ac58b0cb8a
60
2020-07-08 10:05:29
3
a29efb89993616ba832adf005454bc926afcfb60cefbf93fb2c474669b8cc6ab
59
2020-07-08 07:25:32
1
dd76441fac6d42ecea1dcd9f695292d29928d718c34ce3a47f7a3ab00a50360c
58
2020-07-07 22:11:58
0

Rule Matches per Month (last 24 months)