MAL_Taurus_RAT_Feb19_1

Rule Info

Name
MAL_Taurus_RAT_Feb19_1
Author
Florian Roth
Description
Detects Taurus RAT
Score
75
Reference
Internal Research
Date
2019-02-21
Minimum Yara
3.6.0
Rule Hash
2f4228aeb0456af722edd31d18ca451e
Tags
['EXE', 'MAL', 'FILE', 'T1218_011']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
83
Suspicious (< 10 engines)
6
Clean (0 engines)
6

Rule Matches

Timestamp
Positives
Total
Hash
VT
2025-11-20 11:33:50
33
73
9de44b639094b6ee41bb7e616186bea90bd36d7d663cbf2baab5c2d38b28664f
2025-10-12 05:16:28
26
73
23e823f25cf4439dcc21c7eb3f385c6ffa30d52ede87b44abe6574d29496e01a
2025-10-04 14:35:13
0
68
80921ee64cade8527adc41ccfd489bcc61cf45bada12e58f9d3427a7b4ba31d9
2025-09-03 22:08:43
49
73
529409ac7579cdd312b02ce6abe1ce22b84d8fde806b75da561687f5b7b71358
2025-08-05 00:05:49
12
72
1b9c32c413a19f1c00bd32639ec2924d8fada55585ce1f42984fbb6ee68eea11
2025-06-06 21:02:33
29
73
c74b3b5f28b1adc474be645a63d805e78169e8f35d8f2836fd6f9701a8091e4f
2025-04-27 01:37:45
0
72
ef0ead88b72051e36baba4f5068f41e9515d215d0289958bee717d65294c9dfb
2025-03-25 11:14:22
54
74
a3e3506404cc05f5560433bd3fa2f1f55313384915c91203f8dae129084cddf5
2025-03-25 03:09:47
54
74
dd8c3418f8ef8eb9a2b43c432394cd0bdd873c04f130471b0eed71d74ed09b07
2025-03-22 11:27:26
43
73
0f6cdd20a1ac7dae4c8f7963205bac2b73d08c4342ee4fd93bd1bd91a4968f55
2025-03-22 11:11:40
53
74
23501a7f2eab90ea4c32da1b0bea11120e4288899ecc55e0c43aee08ce95ee97
2025-03-18 03:29:34
55
74
494a2d8c41abd4f2f6d72067de6795dc673acaf0c6dc4f4aa000a78579a22c7d
2025-03-11 00:16:29
50
73
2e12d378da5130dde0ccb0e30844faafb50e5165be1f09e0d4bb6f64c373f5de
2025-03-08 01:56:05
55
73
203eef328f20703b6bc1f13739758e64ab2224f2eafaf659783b3cc163a9a0d7
2025-03-06 19:48:07
53
73
56f6708821729480966c54a083df7e4157e6f042e8b351ced88b1e8387dc6f4e
2025-03-06 19:39:02
58
73
ea1a147f010b34be6eeb076c6725c9e62577baa378673525f9698f82c187b1a2
2025-03-06 19:38:17
59
73
c9228df83785b6a51509a46a87433a4d53fbff0ac814b19e244082024d0e9591
2024-08-10 01:29:30
0
75
125280cfe45a9b8db01f23f00079a936e02835f4765e10eeca2cf3c3a55627cb
2024-06-18 21:49:34
24
73
18aef2feb2f4544ddf358e7af6eeb34b8b567a5b7d0d118c0e29fbfc5b46e6f5
2024-06-06 00:25:38
43
73
c912846139f08de7bdc0d814ffada7128610fda6d560b994928eff8a24466100
2024-06-01 13:53:55
3
74
b10817cdde6ef7138d93deb749f18d6f6fdc5967078c0637ba6a4dbb57821ca0
2024-02-26 04:03:39
21
71
c695e14b2db86861bdc3be802580864ba493216f252c8e04c89b58801c846918
2024-02-23 02:05:02
27
71
63f76f73d602ad294864694e8e7dbaca1cb67951293d8dba33a51d857c99fd21
2024-02-15 08:14:26
0
69
823c274986f0893e10746704dabf9f609e1385887c1155ac0c107fe03548adcc
2023-11-13 05:14:50
1
71
b86ce20319b32354ecf01d7f4403941bf1514e04086c0f88061d261369e4d861
2023-10-10 18:52:53
52
71
158b34b8786064b3660d4991abd1edc64b5d3ed0900ba0c355f90157429683ef
2023-06-11 21:11:01
53
70
5fff707b7cd9a6ecfe5d120480af23b1ef0f0d64db3b0c434b5c74b39841e44b
2023-06-11 17:02:00
54
70
0894ff6bb79cb469bc481e71ba822110118b6ea547b0b337380e6cc24480bbf4
2023-05-15 23:14:27
52
70
a3a79d150e4ce35a6f4ee4a21103e3db9b6bbc460e57203388837c5c3b386957
2023-04-03 11:09:23
45
69
13b0243efc578a19115e663e47847c6c3b46dd716e4cef15f553d2abc4614048
2023-03-25 07:31:31
14
66
2b21de266a36ff247286a781d5225539380b2df7246f226cbca67757d98b3e41
2023-03-25 07:26:26
42
69
2b5081e5ec6bd7c58a77f7929f4b3e5883ca0aafca0a5cbe63d7a60e95e3620a
2023-03-15 15:57:37
0
63
cfaa79dad10c40beb6c9d421e1db23fa3cb13e61f0301859ecd4ce0f16723082
2023-01-28 02:36:47
1
69
9ec30c57e3fba4e7fa589ad4e817db542dadd657512095318d9548991f636905
2022-12-09 21:16:45
23
71
8eac9b91a9b0e7a13dc9421d901f8349914848b277723737bc0aafe799c1803d
2022-12-07 10:29:19
38
71
ec745f8cc307dc3cf22c372ab029b04da85038f7f4a419e8eb837747faf3d50b
2022-12-04 03:28:33
0
71
ecea232b798a87b75d8fd48d39b112d5a1be3c34db78935c56b8ce3580c66d01
2022-11-26 19:07:23
33
71
190569d900f225daf584c1c1083e720e9d4eb20a78325fa34cddae8537c37b9f
2022-11-01 20:44:09
51
71
8bb251ed04c7b35131458abd31e07862808f8d797e32b5518f7fca04cfff5328
2022-10-11 06:39:03
42
70
b62a3bcb6e8b9b5d736a9543e338770b93c68c24f19c375811e688975fa2364b
2022-10-07 18:12:24
51
71
b5241208e51de3aa0f84d353913bfa091ea0e7f4d54e07f8715a3efee41ad833
2022-10-07 18:12:21
48
71
a1ce228afefee00f7e305ddb8c33bbb44f69acccead736891fa97e49702264b5
2022-10-07 18:12:06
52
71
93f42acd198aab3898b21f5f6ceaff2b00d204abf63447d3d816a342ef4b803d
2022-10-07 18:12:06
50
71
554a37383a7e64de3f226a65cd22c6b53f2f48f612146f32d89796e1d2de223a
2022-10-07 18:11:59
46
71
34c1e61b72332360c45001cbfa47d1e0a08530421e93209d3b9d8cff2edfed1f
2022-10-05 17:46:56
47
70
482b3d5e9beb664d3ff71e2489039d653903cacf19f6ad6da4445cb5a0d47ad7
2022-10-05 17:44:42
44
70
b77b3fdac66a5f711c7467f1b29bb37f67f9f068e6cebcd0359b09f901c6cdf5
2022-10-05 17:44:40
51
71
20590c554f441218e4731a89e88d048a1c144cadb6b464499e1097d7f88ff796
2022-10-05 17:44:40
47
71
906cf2ecbf29b4b66210a8b64eec57cf3b1e65147096d5c2856f43178fcd345c
2022-10-05 17:44:39
48
71
96e6ae4a8090933cce47738c171409d2db1d97489fbc32c3bccfae2fcfcd3007
2022-10-05 17:44:35
45
71
e0972d926065013f8c53e342b7ef476bdf33f984f8dc7fa8336bced9811d2209
2022-10-05 17:44:34
43
71
429df7d366404b13677eb8a993be49a6fba4e091ee6a4e4f8f538f6499115c13
2022-10-05 17:43:31
47
70
0bd714b5a16690a5d7d6780bf1a444202f8d5aa263b5b16cdb89d737d9609575
2022-10-05 17:43:21
46
71
e50923dbe3462b7083e01d48fa2a6ae0026a8796b967b7992563d1a457fdfddf
2022-10-05 17:42:06
53
71
c3e596848fbc92f90c247ae0fc9289a20d37aadd0361a12797adee0d89059251
2022-10-05 17:42:06
46
71
74941b96c5a2e84e8e63d53efa97083e760a54b70e6bd9280287aa0157f39bc4
2022-09-07 17:13:09
39
70
1456bba7bb18791317e621d32c37d0accc988544266a466f194c3732dd85a40d
2022-09-05 18:56:38
46
70
5192a5bbe166ee3691933268f8d83183648a0b14496e3bd6f74f0151d72c4632
2022-09-05 13:06:10
37
70
a4076cb09270d348e9826097b1bc2b7a89157a478e44017bcb85f089e651864a
2022-05-22 13:32:57
49
67
f5c868d9ac4d18c9c88e181af9370769bf52928d04874d8c3142badf83f664e3
2022-04-09 06:16:55
27
67
a18411eae5439f6f1d6a8b35a45e55e4d3e449012f8d1393056ed090e6389e95
2022-04-08 15:12:38
29
67
ad55bf10a754acef9ff4ace1369c148d4804f3543ba34b173d00c4977c4a0b8a
2021-10-23 12:20:04
30
66
17fb06aa6c0d1ecf33759b00dacb8a283ccebbe43e446c74ed452ca6f3750ca6
2021-10-04 21:39:07
48
68
15d0341473cd45a5512df15d1b9f567b91f8eabbf1c70737292f536916b05391
2021-09-30 20:42:47
42
67
6c5cc26ade0817044fe48006296e845c6b427d2c1a1280b77571ef82874c96cf
2021-09-21 22:44:32
40
66
e66427f37248613d299da8c46ed85ce1e9f72ae5ed5128634875124beadbcaae
2021-09-15 04:14:51
42
67
d2d7f51bf7db72665dc7879318bfdf5359e4363b56931e88fe561395d9368045
2021-09-09 18:11:18
46
68
9eb9f387f9e609d21d4eb2e716c267802d079f231cb8e19f53e30bbb1c419628
2021-09-09 17:21:09
43
68
0c9ffe1245196b7a02fbb0193a99134544acf89b4afd498b9a9b1b17ebe7c286
2021-07-18 16:16:55
48
66
bafaf7c62c52449291c69ac3afa6bced82b1aa6917769a659e3ccc7ca09c4a87
2021-07-16 23:25:32
13
68
ae76cb4176910e580ad76adabe31e7776237c64e32414c047fb7dd0582bdb508
2021-07-14 05:58:42
36
69
b7c9d876833bb86bccde145d23132026696f0509225a05c1ecd6933b88aaf2fc
2021-03-31 07:30:15
31
68
b024a390baff9548d7fa3f2cde69a09dab3bb64f42fe0c2b09df88f3147e4d43
2021-01-28 16:39:23
16
68
f61aa113b376c3434904fe2780a46878c3a6a15117e57373f4ec5cd4e9a419dd
2020-12-16 17:23:28
42
70
be9eb8d9396238b29333b98bf928e370dd325b6a81aeb64a8e851ebbd2349aa3
2020-11-25 16:22:45
42
67
10a35e61cf6a903b02bbcabc540bb1f4bbc280b0432413f819ebe63cfeed17f8
2020-11-21 15:04:55
36
68
a63565c85210759ef96e224daa07f5e30a471724e9c89424e647820483890a77
2020-10-27 16:27:59
51
70
2c4bab3df593ba1d36894e3d911de51d76972b6504d94be22d659cff1325822e
2020-08-22 14:22:17
53
68
038ec18444fe3b59ce245726a93c32e3deeddf69eb6ddf6189da91324af90492
2020-08-03 18:08:20
1
71
6e6d3a831c03b09d9e4a54859329fbfd428083f8f5bc5f27abbfdd9c47ec0e57
2020-08-03 18:08:05
4
70
4a0688baf9661d3737ee82f8992a0a665732c91704f28688f643115648c107d4
2020-07-28 18:23:13
46
71
20cce8fd5b9421a3ceb9e31e87d3737bd9da8a13a2cdd5ac71830a03a2841dc4
2020-04-18 07:44:54
20
57
fb2968c3946a2d20ccfb3c947e18330ece1375877d7aabb781b669d483fb1fcf
2020-03-25 01:05:44
44
72
a590150ca0d3e4cb47796de53aad937f3e118b54cf85b48d0597c0e22acb2142
2020-03-13 04:31:04
50
72
cd8175d6f625276fa9205c7437d26ecd16cbff571e83e0c1ef0761e6ed313322
2020-02-25 00:30:44
49
71
1bd074be9c095bdaa92ffb315ed4b340daa04c23dbd84b35285949a0cff85d79
2019-12-06 09:32:06
13
69
c27beaa1ba70e28019abc82cff6e3dbf9b84dc1c6c18c1b0ddee059b5451cb97
2019-10-22 08:15:34
35
69
a0e62d09838aa73df4939175b192a0e575014ecfaadd91db6c2fc55b206c4e6e
2019-10-19 07:10:15
39
69
bef152609a86ef77cbf1061dad74c3d78cf1aab982677c98a3fb21450efbac0f
2019-10-07 18:48:47
47
69
650eafecd8e5f80447111c3a75c09d0121508a131d1f0a1adb8e16d34bf2105a
2019-09-20 00:43:35
44
68
28f0fed7d0650456635726303847ec7580e91fdfae509b6a1bd9afd75e52018a
2019-09-05 18:28:39
37
68
d9768610f0a620471624ad6e3fa1c69c3c672bf42439b2a62d4f317d99fd29ba
2019-08-29 07:32:36
18
64
35f3673c823719b3f87a4480322a1df7ea8229aa32bf943d92ee1dd1ff558002
2019-06-25 13:15:20
55
68
32fa4868db8d4b358df4d40af3f6ddf16ef2f5c582ae3f15ece7c0bf8cda4ab8
2019-03-28 06:30:07
1
66
f083ad7f0fa873b39267762701c787dd91ec74ceec8d2fb2864078a1a7d4fc86

Rule Matches per Month (last 24 months)