MAL_Rootkit_Characteristic_Jan26

Rule Info

Name
MAL_Rootkit_Characteristic_Jan26
Author
X__Junior
Description
Detects generic characteristic seen used in rootkits
Score
75
Reference
Internal Research
Date
2026-01-28
Minimum Yara
3.5.0
Rule Hash
f4b4ac233951bdb73d452371d46565b8
Tags
['T1014', 'MAL', 'GEN', 'FILE']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
9
Suspicious (< 10 engines)
17
Clean (0 engines)
7

Rule Matches

Timestamp
Positives
Total
Hash
VT
2026-09-12 11:34:46
1
63
a3d5f7b2f44fdb4b904b884b80077f9c29c84103cb9e2ff325f3b16c62340200
2026-09-12 11:34:36
1
64
a2ed7e05a5c7587644cfe0c09f3ac59d3a713e2c10587504d0b6b4e49c125eda
2026-09-12 11:34:35
1
57
e8fef202436562cc0c4f400a8f10973c951ed59ec0ba70ec999550364d69d2f9
2026-09-12 11:34:35
1
64
1f9f8e73223457463245d99b493ab349869d4244f8a301618fa920b05cc451c0
2026-09-12 11:34:16
0
59
0e1e1c066f0ada5dd169d2300af561178f5d1285798d6ab5de1ac138f363e635
2026-09-12 11:34:16
1
64
c4761393dd774c097974cf44cfe841b938ad778bfc6e1d475100bc6aa63a51b4
2026-09-12 11:34:15
0
62
ff07ae40f6ac91beffba853d184b2394586598104e357c7312b588d8291540c8
2026-09-12 11:34:15
1
64
8ca5f7db4e15591e3c20c6ec337860b0ec5f81c0387d1d50e585407503a2aaf7
2026-09-07 01:27:10
1
62
2376118d606f3a692142c940ee936256365099746703d124a8aaf366e6b4b9b6
2026-09-07 01:26:57
1
63
d15c66feeebce6c1d479187ec117d4ac5bc4bf86df77ce9f8138473dcab01d0f
2026-09-07 01:26:56
1
63
9c94ceb7b687d21d4b5e32b7e8279065bc11a417b54ced085c0f6ce91ce38a72
2026-09-07 01:26:56
1
61
3c6252219658a83200c87a714f96faf0c3ad9e47136be3a00179d428078ad104
2026-09-07 01:26:56
0
63
19e8943be593895d3fba286f1362de6a532deaa25edc073b429c57a3dae4a90a
2026-09-03 04:35:27
0
64
99731fd5e012d392381deec768756a53d59b5bb9c35f2267be750898e63c09b3
2026-08-12 04:04:36
1
62
a1d8f94ed51444ce95422960b346e5bd8f0e1f4c5e5bbbe902af39192dc15810
2026-08-12 03:54:26
0
63
929346399dc8c82c3d31144ea6a2f76e53d3f07a74447cafa06b2cd97dfbc300
2026-08-12 03:54:16
1
63
30aa7dece13469526b095f129ac02f4797b056870ee04bc57493cdb244ff28f1
2026-08-12 03:54:16
1
62
f36cc8c7a3a5c1ef18f1d47f858ca40b1988f9dea1983ee7b9c90b1cb7643ea0
2026-08-12 03:54:06
0
63
fe9bd3685261617c445a3c98a3d46e206ede1b92ddc1e19ddd8e3eadb97ce7df
2026-08-12 03:54:06
1
63
498c57a6caa8153a78c0435db20d589825c93b3b855f7044543a22e03684e92c
2026-08-12 03:54:06
1
63
95b3181facf25bd0aef6529eb790a474d3fc4756a09f3a572438b7af3d4f81d1
2026-07-07 01:39:15
1
64
45fe6f33f3753e2d353b22093c782ff2a52d2002fc4aee4dac453578d01a423c
2026-06-17 12:35:16
19
61
4c413da6cf775d9c4666d0ef0898985f5b0d693664183bced3bc6a8635983cc5
2026-04-29 09:17:54
0
64
8c4027cf46df404f6237b3b331746ced89462b0846eaa87b16d6ed3ece12ac32
2026-03-11 01:11:44
10
66
2337967908476febd201eb83612fb779aebe4b7b0aaa1f19e2aa00592ecae7b1
2026-03-11 01:11:44
21
66
2aaf812cdcac28ee8a9063ab0b26338dabbf6013e1c6db22c81b27feac7d597e
2026-03-11 01:11:35
10
66
d67e7354ea563c72d01b2aa6b2cd07c64c0f3f5fcc63fb321763a92343469c9b
2026-03-11 01:11:17
9
65
2169023474ce47f890f9637b657375a7ed5ccb9b0e7603815fe8557aacf3ea71
2026-03-11 01:11:16
10
66
1738bd8399cae9fd46b8003c8b3a3d74d9afad7b79cc9bb7cbcd2d985d4effa0
2026-03-10 04:42:34
28
65
16f255b4ad4de9c70794425ddb4b7ff4b2b89c1fc538fca635f564dbeaf835e8
2026-02-15 13:38:57
23
58
4088960e6f96662733a7b5fb257b4ee84023dec612ed5808bd97da792ab80cde
2026-02-12 08:52:44
33
62
05eac3663d47a29da0d32f67e10d161f831138e10958dcd88b9dc97038948f69
2026-02-11 08:38:56
36
66
6850788b9c76042e0e29a318f65fceb574083ed3ec39a34bc64a1292f4586b41

Rule Matches per Month (last 24 months)