MAL_Rootkit_Characteristic_Jan26

Rule Info

Name
MAL_Rootkit_Characteristic_Jan26
Author
X__Junior
Description
Detects generic characteristic seen used in rootkits
Score
75
Reference
Internal Research
Date
2026-01-28
Minimum Yara
3.5.0
Rule Hash
f4b4ac233951bdb73d452371d46565b8
Tags
['MAL', 'GEN', 'T1014', 'FILE']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
9
Suspicious (< 10 engines)
60
Clean (0 engines)
37

Rule Matches

Timestamp
Positives
Total
Hash
VT
2026-11-02 11:38:02
2
64
c147a3fb98e772e30e19dccc5399df9d295a7af86ce3190a2512fd2faf81423b
2026-11-02 11:38:02
1
64
4330db663b92ac1d0b5818cca3af23861649fe00b60590c46ae6f98a34786dd5
2026-11-02 11:38:02
1
64
2e6ae2cf5e3676e90589deed93fd6705db94a4215e6e30344a5bba86ef3f1688
2026-11-02 11:38:02
1
64
c6ff788564833029d105d1e1a044ea96708b64c8a9364b0e9779910ddeb79d02
2026-11-02 11:38:02
1
64
d8cf16c1b2f7fb189500f0f1cfec4a76b5208b87c70e62c84a8467d5b1f1e415
2026-11-02 11:38:02
1
64
b186d004b122a80a10b45724b1e037102d70cadce13f8fd40eb8ce507eb20392
2026-11-02 11:38:02
1
64
153760e042e47d33a95d721ddd518dd4112e2ba66923ba5daf088041f9a67f00
2026-11-02 11:38:02
1
64
32b4b030128f59ba44de615320cfd89bb84f7b027a46d6ecb2f826999900eb5d
2026-11-02 11:38:02
1
64
7e667a4e71c9ecc90c7960344d5895c63a4012daf02a3b021d994b0baae7e84a
2026-11-02 11:38:02
1
64
558c9792b0900727740401ca445e26fbd01b552e8b7507cf86d715d7826a29f7
2026-11-02 11:38:01
1
64
d1346334d3c5f424a04b917200ad243a714d499674e12e846a67353ff75b74f6
2026-11-02 11:38:01
1
64
53369aecc5b49af9f50cc8cf3ee0ed7fee61728aee9766da5e83afb450b8bbac
2026-11-02 11:38:01
1
64
663d1a516f4a5db2576a0b5617cb32b09c5155f462a68684394d270fb581e059
2026-11-02 11:38:01
1
64
ff7584683fb3f6204ab355468463a3c0d416d586a9b70261c9fc771494133164
2026-11-02 11:38:01
1
64
98c7eaf0f2a507ae5348a0a63c5b144a6f3ade661255eb2be0edd376cf1e5ae4
2026-11-02 11:38:01
1
64
bd8c3d5b289b6b6733800acbb30750341a2a8a285afeae3c7be37bb5cb07d28d
2026-11-02 11:38:01
1
64
abf65b5cb65f3a843301706214e2ea49e10d475e4ba031a0d65fb121c83fd1c1
2026-11-02 11:38:01
1
63
dc8ae828b59b808d5695e899a27909d6abf98552c2d8a629153080565070fe0f
2026-11-02 11:38:01
0
64
4a83642630856619e5936225628fed356f6464daae1c32a0268872be2b123493
2026-11-02 11:38:01
0
64
2c7822af00b9672da9984795bc4fa77c0f269a81033793e1e8ef2a6093f4f297
2026-11-02 11:38:01
0
64
afe8d3abb8e24f64cef8dbd100c3fae6f02ac448c9e6eef05856880a66a3687c
2026-11-02 11:38:01
0
64
aab55bd661403030393c2d94bb367a505772bf58ebe446e3fa3e3696b18187c9
2026-11-02 11:38:00
0
64
7c382b060645b883d8f70463b4ee4d55d40644fa0a2fcf77c59ee21406cd2b69
2026-11-02 11:38:00
0
64
db4ace364e3edee5c486b3be13c924fa04b6fddc2e4fe1fb7f9ce29ba93d3fd5
2026-11-02 11:38:00
0
64
663747558fa420a19ee200b1e13a70b2d6b768afcf6633418e4e70ceac1efd39
2026-11-02 11:38:00
0
64
fce99848ce6b961d0e872033a9f259bb2233f97ae059bb84b5d05f262bef9959
2026-11-02 11:38:00
0
64
47621e7f0a3f520a82cefe17e753a356f1bfc4b6e320290cc7f797fa1d1e6c00
2026-11-02 11:38:00
0
64
22c05328b9bc52e66e99b985491670bfb22c625e60bdfe0c29e591f56912a860
2026-11-02 11:38:00
0
64
1b718ea75791e3c8f78e49881e7709ee728332fc422bde980429fc38f532baa7
2026-11-02 11:38:00
0
64
172da7a89761322d54ab1a4a0d1900be1e24ff5ba27724fdc5df586d1932f5a1
2026-10-22 01:31:47
0
64
611a92ebb3c49345de5ecc384cdde9f4ca4b5a3515fe139d9d716342c1d6a928
2026-10-22 01:31:40
0
64
9d3a549511e571ad8ad1890b0bd44e7b5c7c4bd0dad7b01482272ba31021da20
2026-10-20 19:10:19
2
48
e91c91af95eb09feb92833e48bfd935f02c5cc154e2b971d8fb73a377fa179f6
2026-10-19 12:53:57
1
64
32ed687c7ee89ee5b5dffac3078570fded27951bc22462669dffc4a54fcfff74
2026-10-19 12:53:57
1
64
02bef8234fa62b0de1675b295f3f3f561e8cba7463416fa1cfb5a3254713a115
2026-10-19 12:51:36
0
64
56a5ffa7b668048be5f599587e16f7e41d060a1d3d36bb564132bb899dde8241
2026-10-19 12:50:18
1
64
3ee2fbe57a8fa22b1d1b50b35be2126010ca788008ade9858be126689b239df2
2026-10-19 12:50:17
1
64
e8b1d7e1717efa75cd1f27cab64c1080c888c4d4668634699d561c35357e9346
2026-10-13 22:59:45
1
64
d86dd67662128fd720ce415e6a2131cdf734897ec8ddca6a10b19a27149aec3f
2026-10-13 22:53:47
1
64
6f41f5620dbaa64ebbd6447698740eb70b4a57b44f3bf0cea13468b36a076f15
2026-10-13 22:53:47
1
63
4674c4500706acdb32de4e3257946feb0e8b9da708477b8d9a91dafa4b9c7e2c
2026-10-13 22:53:46
0
64
f6a931e0285ea7907061d34c6b263016920d9bfae22685c6dd68d62b0a672676
2026-10-13 22:53:38
1
62
d0fe4f5b22d1ea261ae0c516c97ce4a53296ace8572e9e7527caca7bbb0a129b
2026-10-13 22:53:27
1
62
977c4153524505472287320d50e7d1e61ac1035a9e0f43803f9ceea10f3c4d53
2026-10-11 21:58:06
1
63
a457ba9ecd1b3538cf29ea6a796d7f8af9013a5cbe30f897635783b72480d760
2026-10-09 10:09:37
1
64
714f49e5c3326d28ba55e0d16740f18f5d78e6254c0aaa7b97a962a8f2c54019
2026-10-09 10:09:36
1
64
9b5a236e2e68022b4769a2628e70ef6a818c24d78fa23ca1b77fed8fe884e789
2026-10-09 10:09:36
1
64
3f7c0b9535f2562da2b14b6b8fdb20b40bacd9f1834edab830fc35cb1949ff82
2026-10-09 10:09:36
1
63
653bb8df91ce41216c76127a9a12b2087c7e864f15676255253213577cff1078
2026-10-09 10:09:36
0
64
3249238a722d0eee996ab0a40d57828120e70c5c6bc02b436dd2a70cd5c59b6d
2026-10-09 10:09:36
0
64
0a2a5157f7e47fab16ab473bb97ba6c3e4f5e5f4ebfa90deea2003487b2ffdc6
2026-10-09 10:09:36
0
64
b9f1e0840acd90ec3e1601fa4d991842d08d8f4057db2df272ab8b491296f491
2026-10-09 10:09:27
0
60
1f32413a3f75e724ccf1ee886e57c80837e8b0212e2aabddb65788714ca1917d
2026-10-09 10:09:26
0
64
9bd1012d157a553a9cbc45ee5f9d17d5992fa5182e6acbe811a295c6372e6a14
2026-10-09 10:09:26
0
64
602ce92575d449ba834d60156dfd7d8d35ebe50b753bda17b93fa1006d7e2c5f
2026-10-09 10:09:26
0
64
032515da1d8aa840b726393f6c9044b4a452bbeda0f141efb2db38b83c706084
2026-10-09 10:09:26
0
64
eb4829b4e8e6cfd5fa670ba4155d399dd1af168d612a36743902c084922fa63a
2026-10-09 10:09:26
0
64
5b96cb9d8153d494c38154ef592ea915708d1ce7d4940cfa3395df69fc5f394a
2026-10-09 10:09:26
0
63
e0f2d3c8031ff9c019ef2dca8ca3f870592a8fb9f990dc9a74be2beeac59259c
2026-10-09 10:09:26
0
60
db071576902b2acbfda0b67aed6391dee46b607c5e2ca03df17990f36ea27634
2026-10-04 13:08:57
2
64
3bfd21df37568cd82db3193b8a6af0991bd90f4d84892c6e8a1f9814a6108f9b
2026-10-04 13:08:37
1
64
2228d41f978c6935be3bd0fe3438141b57a303f036e17436e83b9e62ce706501
2026-10-04 13:08:37
0
64
c7711519852ad818ed919afffdb0eef403b38b6b14f76d0ed97993b41a8cec33
2026-10-04 13:08:07
1
64
16b889551d1adcfcd476d8375c0e2be37b0ea498baa7b01f7bac0ba98b4b78f0
2026-10-04 13:08:07
1
64
cb27848150f8e195a85b0562c73378e220a38b688cd8fd7aa23212b4e9252d3c
2026-10-04 13:08:07
1
64
2b33239fb93676a9a06cec54d0931a63b4b2357e0862bf655fc5928f7c3fa54d
2026-10-02 15:32:36
1
64
13a67a5ed7779fec63895cff761e8f400ec6193a289b008788256f1aa9bf167c
2026-09-13 14:55:35
1
63
dd952253d0ddee4c5bd6a5c93c3b5dddc2ebcd0b8c7e177f3b01e62d1361fc6a
2026-09-13 14:54:56
1
64
4633a2f40e3372d0dcc53bbfc2c7638ae1e1ff60730f40535980ec84889b70e3
2026-09-13 14:54:48
1
63
2c8e3b992e58707d959b3896c455af7fc4a6ede3441e5df1121d6d3c8cb4c3cd
2026-09-13 14:54:47
1
64
e03fa66903ceb2c42019ad37645c859df0a06479c392be68d93a325d9401b11b
2026-09-13 14:54:37
0
64
da946783880eebde6af50c169eb5cf2248504a4a8cb2b1b4480839bcdedfbb73
2026-09-13 14:54:25
0
63
ddc20efe2f439f9fecffd4e2d596a86ad30d8bc0de061efe13c76c55a06b1bf7
2026-09-12 11:34:46
1
63
a3d5f7b2f44fdb4b904b884b80077f9c29c84103cb9e2ff325f3b16c62340200
2026-09-12 11:34:36
1
64
a2ed7e05a5c7587644cfe0c09f3ac59d3a713e2c10587504d0b6b4e49c125eda
2026-09-12 11:34:35
1
64
1f9f8e73223457463245d99b493ab349869d4244f8a301618fa920b05cc451c0
2026-09-12 11:34:35
1
57
e8fef202436562cc0c4f400a8f10973c951ed59ec0ba70ec999550364d69d2f9
2026-09-12 11:34:16
1
64
c4761393dd774c097974cf44cfe841b938ad778bfc6e1d475100bc6aa63a51b4
2026-09-12 11:34:16
0
59
0e1e1c066f0ada5dd169d2300af561178f5d1285798d6ab5de1ac138f363e635
2026-09-12 11:34:15
1
64
8ca5f7db4e15591e3c20c6ec337860b0ec5f81c0387d1d50e585407503a2aaf7
2026-09-12 11:34:15
0
62
ff07ae40f6ac91beffba853d184b2394586598104e357c7312b588d8291540c8
2026-09-07 01:27:10
1
62
2376118d606f3a692142c940ee936256365099746703d124a8aaf366e6b4b9b6
2026-09-07 01:26:57
1
63
d15c66feeebce6c1d479187ec117d4ac5bc4bf86df77ce9f8138473dcab01d0f
2026-09-07 01:26:56
1
63
9c94ceb7b687d21d4b5e32b7e8279065bc11a417b54ced085c0f6ce91ce38a72
2026-09-07 01:26:56
1
61
3c6252219658a83200c87a714f96faf0c3ad9e47136be3a00179d428078ad104
2026-09-07 01:26:56
0
63
19e8943be593895d3fba286f1362de6a532deaa25edc073b429c57a3dae4a90a
2026-09-03 04:35:27
0
64
99731fd5e012d392381deec768756a53d59b5bb9c35f2267be750898e63c09b3
2026-08-12 04:04:36
1
62
a1d8f94ed51444ce95422960b346e5bd8f0e1f4c5e5bbbe902af39192dc15810
2026-08-12 03:54:26
0
63
929346399dc8c82c3d31144ea6a2f76e53d3f07a74447cafa06b2cd97dfbc300
2026-08-12 03:54:16
1
63
30aa7dece13469526b095f129ac02f4797b056870ee04bc57493cdb244ff28f1
2026-08-12 03:54:16
1
62
f36cc8c7a3a5c1ef18f1d47f858ca40b1988f9dea1983ee7b9c90b1cb7643ea0
2026-08-12 03:54:06
1
63
498c57a6caa8153a78c0435db20d589825c93b3b855f7044543a22e03684e92c
2026-08-12 03:54:06
1
63
95b3181facf25bd0aef6529eb790a474d3fc4756a09f3a572438b7af3d4f81d1
2026-08-12 03:54:06
0
63
fe9bd3685261617c445a3c98a3d46e206ede1b92ddc1e19ddd8e3eadb97ce7df
2026-07-07 01:39:15
1
64
45fe6f33f3753e2d353b22093c782ff2a52d2002fc4aee4dac453578d01a423c
2026-06-17 12:35:16
19
61
4c413da6cf775d9c4666d0ef0898985f5b0d693664183bced3bc6a8635983cc5
2026-04-29 09:17:54
0
64
8c4027cf46df404f6237b3b331746ced89462b0846eaa87b16d6ed3ece12ac32
2026-03-11 01:11:44
21
66
2aaf812cdcac28ee8a9063ab0b26338dabbf6013e1c6db22c81b27feac7d597e
2026-03-11 01:11:44
10
66
2337967908476febd201eb83612fb779aebe4b7b0aaa1f19e2aa00592ecae7b1
2026-03-11 01:11:35
10
66
d67e7354ea563c72d01b2aa6b2cd07c64c0f3f5fcc63fb321763a92343469c9b
2026-03-11 01:11:17
9
65
2169023474ce47f890f9637b657375a7ed5ccb9b0e7603815fe8557aacf3ea71
2026-03-11 01:11:16
10
66
1738bd8399cae9fd46b8003c8b3a3d74d9afad7b79cc9bb7cbcd2d985d4effa0
2026-03-10 04:42:34
28
65
16f255b4ad4de9c70794425ddb4b7ff4b2b89c1fc538fca635f564dbeaf835e8
2026-02-15 13:38:57
23
58
4088960e6f96662733a7b5fb257b4ee84023dec612ed5808bd97da792ab80cde
2026-02-12 08:52:44
33
62
05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69
2026-02-11 08:38:56
36
66
6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41

Rule Matches per Month (last 24 months)