SUSP_BAT_OBFUSC_Apr23_3

Rule Info

Name
SUSP_BAT_OBFUSC_Apr23_3
Minimum Yara
1.7
Date
2023-04-27
Description
Detects obfuscated batch files
Author
Florian Roth
Rule Hash
03251c19d6bf55fed96805a8cb997a17
Tags
['OBFUS', 'SCRIPT', 'SUSP', 'T1027']
Score
70
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
7
Suspicious (< 10 engines)
61
Clean (0 engines)
92

Rule Matches

Hash
Timestamp
Total
Positives
VT
1f838c1fbbe7ad1bedfea4fe55eaa4719a09618ec60c514e821e02c39eca0821
2023-06-07 21:01:55
59
2
87f977d13206a85528529d809108f260fafc5f1c98dd4bb7cce861253e4cf41b
2023-06-07 14:40:29
58
2
f0170508f90303e4a945e14462b1d66d437614e04c39bf44201f325d9cfbcbab
2023-06-07 13:16:55
59
1
955bcaeffdb3ecc89e1e5f785fe9ec53dcbc1d9aa88bbc4d55cb0fe244833d85
2023-06-07 00:36:36
59
2
59155fe1aa67ee4689731b62d5bc99ae38bad31687c03258619de33c804028a2
2023-06-06 19:40:13
59
2
0399fa26172727dc80cca649caa625e9eceadd3d220033ddbde1683cd60c731b
2023-06-05 16:14:49
58
1
00c033211d170891abd4bf145afa5f07b6b6e6e8d444bf73678f3a7215bbfc7d
2023-06-05 16:12:48
59
2
0c5651d410c1caefa0f6d4791eb44455059cdda19cf3f1ff9a8ba88cb599bffe
2023-06-05 16:09:42
58
3
61862dd8ccd18c0ea1c13c06bc0e2bbcdab8ff6792cc7ae49952b44534a7a9d5
2023-06-05 14:22:06
59
4
ca10531c42e958a64aa4ea4e335a57ca2129ec9cea95179be919336b579c86c0
2023-06-05 12:00:31
59
2
8c8ed60ae72c1f77245b39434675fbf7e75dfee427c57eb9491eafb2df557bf5
2023-06-05 10:10:59
59
2
7c480325fca9301b207786e3f13452065290e376673b46245eada25bfa1a0a9b
2023-06-05 10:08:54
59
2
ea49a26263e5154dc5cc76ce00d9db69721e0686af8d8545c6725976b1233e7b
2023-06-05 09:14:53
59
1
436a15110bed838aaf574bfae84e7ce259c6d79acc1569320eb483d33e057c10
2023-06-05 09:13:53
59
1
978d0834dcde86f16e1cb0b45a0af4f3893d0702ae8e254cd0e9bcc39f5f763c
2023-06-05 09:10:12
59
1
b05dd12b40859c0007640c238cd115c1b9a1972a2094e37add1d0b13ffd1087c
2023-06-05 09:06:37
59
1
313642f5e39d87b46aa4ab153a5f1da954b70d3ea2b2c20246330bb491d3e979
2023-06-05 09:06:14
59
2
2831f21553a4fad1739d54bad46e7647a8e4f5f2464100a8f869afcf6c472991
2023-06-05 09:03:38
59
2
de50881647c6e5b9ca55f9320f801b973d0dee771203fc6e002fbd1c8c7bc285
2023-06-05 09:03:16
59
2
e8522aea0233d405230f49bccd789320c6c7ec171045baf3d09f404d90a8655c
2023-06-05 09:02:55
59
2
e5d0949cd869224ceff85375cde8aa564e36f5ecad374d5bf5b4438571d478cb
2023-06-05 09:01:59
59
2
514efbd768e4e134be203fd70f74c7103710ecbc2e7921c35d1964abce450de7
2023-06-05 07:11:28
60
1
b56437db270bafe41fe41288d1ee7e1df9aa8fb499e2eb90db00a20d77503245
2023-06-04 17:01:33
59
0
d18ec6308f75bfb0090b6586129a933530eba5d5994454bf49db5bed832bf436
2023-06-03 19:24:27
59
2
d6d666fde87f4b9f0f0ebb3eb159f08daa09588b433ec26302a70efe11ffe9b3
2023-06-03 17:09:11
59
2
bbeb752aacc339f7ef158033bbec70ddec45a2d78844a9f9420472c8f53c88a0
2023-06-03 15:05:27
59
1
02c6cf730870b64263480baf6e44fe445c65f99aeba41adf04e736893478a5e7
2023-06-03 14:05:26
59
0
df35696037116abd9147afd769cdf75758df1dbd21291189f24b095255171bdf
2023-06-03 09:11:48
59
2
5329f68a54530ff3baae8835c55ef25efa625804e59f1e9f08d908b428d7f1d4
2023-06-03 05:08:04
59
2
ec966c8f55b547771bcf0977ad39f4cf0811a704c6a918d24f02380994671fbc
2023-06-03 02:17:33
71
24
69de9f8bc07ae7868394ceb4ed6d5925ff1f05d32d9733abc24f3a0644a00bfb
2023-06-02 23:03:53
59
0
a6522629b312e17e97a113be0cefd0cb94b1f7d3a25cf5d2007ad7e76272adae
2023-06-02 22:10:29
59
2
072ebb8a3172d7d7a79a9a6c287d25d417e1ac747cf84520be3c10704dcd3f97
2023-06-02 15:02:18
59
2
d5c4d31b48e09c99573e6b1540d0bda9944ce059df0b64f3a65860bfc9dd9f46
2023-06-02 15:02:17
59
1
ac08cce9172afbc75c6fb90cf5836fc536261cfb497ecd041e190dd4adcab7c0
2023-06-02 15:02:17
58
2
602cdf71f8b31a64b36da0ce1e1917696acef88d05f95a768e442da0b3b36b58
2023-06-02 15:02:10
59
2
32a38202fa82759e376bd81a9f875a94126dad5efaf77074ca057e7abaaa9e95
2023-06-02 15:02:10
59
1
80879610f2ea0c39913df72873a4298500d6bfeb37800247dd50bc623c9a5cf8
2023-06-02 15:02:00
59
2
c35281c8c6f37bf6c435a47fe3cfefa04111f7f4f6566a501b9c63eabc3b34d1
2023-06-02 15:02:00
59
2
b11cba6f89919bf2494a66d90d2b132d98c7471c794709b53f16399388be2707
2023-06-02 15:02:00
59
2
81acfaef2487e6dfb747615557c6eb6007b0f6c61645a05a33606b0ccc220930
2023-06-02 15:01:47
59
1
a0c05ab85e568f3d50c062cc58dba03a884bed68c41307770b3d820ebe6912c3
2023-06-02 15:01:47
57
2
fd16a9c0bc428b144210f8e290a2f35eddc0e0ddb3e9b21068755eee505c3275
2023-06-02 15:01:38
59
2
d0613c61c38401b697c9cbcf3d0d1f0f16fa531cdb6ea9bbbecc8a61c573cda0
2023-06-02 09:04:22
59
0
1e7313f54d5d830c18407a9b8b8ab4218ab24df7a975a16de214ce8aed946a04
2023-06-02 08:00:13
59
0
78d321441aa7b74af3e6e030d41b41a40d37608784e8ad52c322798e862b3c39
2023-06-02 05:05:21
59
0
81937aa5e0927afa5d549357578bcbc29e17428cf4fddaa98c488eb969711ebd
2023-06-01 17:02:20
58
0
55edece11936bd42aa5ed8a6cf5765f5d8552380cf35cc657eb51bd856326bf0
2023-06-01 14:15:37
59
0
b00cb9380bcf68cbfae3088e24b5669dbdb72502a281a7cb669edab0ab1f4a8a
2023-06-01 13:15:40
59
1
50c2d16d8e5d4e45fc4ce61db35151355dcb6547a8acec6f377a58a40188c3f6
2023-06-01 13:00:29
58
0
3a8fb0eb6d9b6a2f27a9dab62eef355de4d871d0c71feadd45152360e72f0286
2023-06-01 02:13:14
59
1
f97db6c92ccfe7e456d02341f6709fe1790ad56b84ba35af9893a2921ba851ae
2023-05-31 19:11:53
59
0
657b255ecde125b2b8b2806a9c70a79aaf6259fb7493ddcec28fa44a4722e609
2023-05-31 18:11:53
59
3
7a0c2dfae40f38cdff130ebccfd5ad08b3f080a2842e6208d3e9e1fab261d15c
2023-05-31 15:09:56
58
2
46ca011ef9cfdd6c3689017e65336630b459449218167112ef67060ab00e2359
2023-05-31 15:02:51
52
1
d37e0bc6c8901a1bc2b55a876c558754bc62ec98cf210ff0db862e40aa1ed326
2023-05-31 15:02:51
59
2
2cb575f8ac944f327f675440811213c53d8d8ec9b2beef37c621168fcb3e4f6e
2023-05-31 11:10:34
59
0
8ace121fae472cc7ce896c91a3f1743d5ccc8a389bc3152578c4782171c69e87
2023-05-31 11:09:37
59
2
d97c3981bd25acde0104cd1029526a7f64d59bed9f5eb134ee7c2d20cb943bf2
2023-05-31 11:02:37
59
2
46d59c82f73360538b43c230d4d0d33773a27941bad567826c1a50c3c9bfdfab
2023-05-31 07:05:23
59
0
97354ae890b2ae6e383713f54a3afd37cccc104db90d7413d787e2c633ec0ecc
2023-05-31 00:02:44
59
11
e2ac8285eef01d97cdc90e50b28b3f73e8fd42ad3f9b00a5abe3f30841e20277
2023-05-30 18:07:50
71
45
a1cb38b59b253d704c4c34c4efef9a226738d9146416c98a266f87a64d9fdb4a
2023-05-30 04:11:14
59
0
c3c67b1638650c56d6889aaf0295d6d5a581c146a55e26d1037a9c1cac9d7f25
2023-05-29 17:01:01
59
0
861f3f6fdebf3c462746b09e00064170dd1fa610e3d7970f2a243734801d95ff
2023-05-29 16:03:02
59
0
af0d53af9b1925f000dc255baf02a231bd23480c1d1f1cf8e8c630efb47b9ab5
2023-05-29 14:15:04
59
0
10101676b45133e3376e4169b767daa0a9783ca1ccd5b7317b488bbfbaa6a3ca
2023-05-28 21:04:07
59
0
bdcb45e329ed0673e4a742967f9bf8c8b34a3f434b41ed6f57c6350272d9432f
2023-05-28 19:22:47
59
0
4e24896305241c0ce489e1f85de27fe961b9ba7eabd116fea9a1c9eab9459398
2023-05-28 14:06:16
59
0
73b26a7d1f9427ce6997cb0e3f296786bc298d13c038fde84c4d4cd3c267d8c2
2023-05-28 11:12:42
59
0
dfc2d4ef679b807b13ae6c1eb7146ce0aad00b3e970c37e29dc5dc2bcef45eab
2023-05-28 10:04:47
59
2
fa1d601efbe021514972ba34f6b70946bfa180fbbefef219f988880d80523272
2023-05-28 02:04:32
70
36
f2a05f9d90cb991550895c3c694ce71655725fc40af5a3bc7fb8c6f71d60f7ae
2023-05-27 19:09:30
59
0
3a1bb0f39222b2aeba653629a1ef6edec2d98a0afa2415d0e221fe39d626a8a2
2023-05-27 16:03:06
60
1
1b02b4e9142ddecdd82c57cd12e4231d5c7e94197808a8ed7cd28f1406bb1f09
2023-05-27 15:02:09
59
0
fd7ce8fc046ff96509f9c2cd52d40c66e9bd121f35c83bdf8f70fa7e3f7a0cba
2023-05-27 08:13:33
59
0
1dec1f5dcffba66698714cb0a2fd0269ecbfbc37e6eb6947b2fb46210283ee46
2023-05-27 08:01:51
60
0
300ed4c70e589d47a72b27ce21cfe99b9e60218626007a884b1c8ebb8be1cdc4
2023-05-27 07:10:46
59
0
fdf528a8ece2cb307e64793bccf1cd050b72aec4750d30d266544650da27d462
2023-05-27 05:11:37
59
0
6f369d35b3e46544997337c693fdfce590d2c35d57555ad2bfbc326187419c6d
2023-05-26 02:13:37
56
0
51141cad0369b1957e7338ea8fb7e2844204e366853e60678f4dd53ae9cde65f
2023-05-25 22:13:31
60
0
a5fa1e06485cca7351b4e65538a832c7a2a56715907d2c7587d1516441e572a9
2023-05-25 10:05:26
59
1
c1490ef87f25c4c9f0a70765b23b22bb540587fed03711fabf5b2cd92717bfc4
2023-05-25 03:05:55
59
0
0e1bc160938a7f20725aabcd663b7791afffb06c444db9efb0236d1391784907
2023-05-25 02:09:30
59
0
c6509d967aefc4b13d5d5faf443659d330205193fa1bb8166e6fce44fa00fbf4
2023-05-25 02:05:37
59
0
5f0468708720ad50d415e043cf664707a74d54df438413c53a8cf89e86aeec99
2023-05-24 18:09:08
59
1
5daca6f8b45915bfd58e689af4fc1b6d28b954a07115192992a5b7ea9f055111
2023-05-24 03:18:20
59
0
c6401d5279a6e9e8b2d039a57b267f8f302faee413f75abaca2c62de2a97c51b
2023-05-23 23:05:50
59
0
275e790a0097137ff9a0baafd6e5693423a4c6c05a5ef7102fb61856844a3e2b
2023-05-23 19:08:23
58
1
b4b9a276f49e171bf22026384d9c36b5e8a95f41b186e721e26c10e99238ca7c
2023-05-23 14:10:20
59
0
d361a80e0775b25981c587606a859d756f09290111b45c13c4469e815b426f3d
2023-05-23 07:15:08
59
0
e9414cbb1b084b9ff63b7c2b42b6b0d028a5a92c66356924a2665e2a7d46fc6c
2023-05-23 07:11:56
59
0
452cad2e8a0b7688d312ad74008d8fce5a3c5e19186d973847c3bcdf0f534436
2023-05-23 04:09:46
71
38
991ef37bd32e99c40b45a2824e5e5c09ac9063c6eceb1c8d1a66153e657237f5
2023-05-22 20:15:18
59
0
4394d9b4ea1e55f12c50a91dfdc402faf14c6cab2891a88579a1de5bded96071
2023-05-22 20:05:46
59
0
a673637b1eb84cdf148cb0a7793ad672fd7204cd315a7fa69fb218847f6b14fa
2023-05-22 02:08:39
59
0
dcebdc0de49f10c77b01f4e777537c92b1bcd423ddef96b7cca632eca5a61930
2023-05-22 01:17:14
59
8
6a53b249c02b6ab050eb0713007e3db51f565376a529dbbbd3ea633f48368724
2023-05-21 22:06:56
59
0
7809a9e9dad9a19fa96a6e71c09cd1c3ec53d4d5cc20162b321a1bd4ff56bb66
2023-05-21 20:09:20
58
0
91acc841fd078a6472a53b63f1736aad2b3eaab1fa21ee8fb96eb11b000bde2b
2023-05-21 13:13:36
58
0
6f66834280e2a63d3cd1c72d0947355877163e1f055a464f99c6bc6e0512669f
2023-05-21 12:17:29
59
0
4cfae6def97574f12070488014f6455bc299cbda160934e7bca7031a1be26d4d
2023-05-21 05:07:45
58
0
503529dc5fa97e7f132168d36293b42fcf5feb26e111300cdac2e399152119b8
2023-05-21 02:16:50
29
0
c3a00519e0e547ff969e2e6d8ccff68b6c617e47693edfd06da2bbd465db579b
2023-05-20 23:08:29
71
37
1f18d77e70e66da06b3410549e2ae87676c3544a13cd19afddf176755acddfb4
2023-05-20 21:18:36
59
0
4f3cfb4d512593f9c7b1baf0f46231fd6be1e8c956b64203f2a37308820fb7af
2023-05-20 21:12:46
59
0
c02f8f755eeadf23c3a18f97fe9ad887ab42316c421469b3601dcba6df9c792a
2023-05-20 14:05:31
59
0
2446f9b9854639b0d213453441da43a8452180a72ee90f09f4d3e2b3bc34ad33
2023-05-20 00:06:41
59
0
f7a7ecb5d8dbca3e027c5ad5b20d63f17059c6ffe873ef2570aab3f8874fad41
2023-05-19 11:18:42
56
0
a71d1fdfdb70b8b3fd717bf32a27ca235a5213237dbde777caa6d42060d9b4de
2023-05-19 00:12:27
59
0
135169e46387e4bc70c6b76b5db0dbb99c015de106555726129eb68f4b610210
2023-05-18 20:18:13
58
0
8e626e149c682677b0ca5d1312e4cc56c94724b17b0630d278d0d54d20dba5c9
2023-05-18 19:08:12
59
0
4028d892c10ec13e29eecf933d6b3ac994c4504425ca0e6481673b4c2bafc268
2023-05-18 15:17:15
70
33
ad25c6a186da8de475ff7edcff8044946b9806a18485eaf37a6e2fe83d73c173
2023-05-17 14:10:34
57
0
2e17b6ccca3666f1878282be2cbe9438e8acc42bf303b7ec7037281d5920e677
2023-05-17 12:16:24
58
0
812dffdac2172940e631b35e88ad6451150cac1c86cd24d74e8fc28c79a65074
2023-05-17 12:05:55
52
0
257e7495a757f68b433b886b679e9569e2f07894ba990dd27120a465650ae97f
2023-05-17 11:06:55
58
0
3f5877680bb64db54f0a73725aa95ce430ec52efb7b033b3bc6e065714944729
2023-05-17 02:12:24
60
0
408521c1db87924bf0e8732a3994df7e9e7f09b98ffa70f5a2569feb9d7e62f7
2023-05-16 21:06:28
59
0
83b02e366e8a9a74044b795eb35ebdbc5d0930ac2b9e219d4103e63f674bc4ce
2023-05-16 19:17:33
59
0
6f16de662e10f3283489a975a1a194d6a25352f9da58da468fde1230c011b753
2023-05-15 05:19:15
59
0
45b920a8e3a88b4d55f91bdcda7ea1dce9f3b687b904b92907d5c4cd150aafad
2023-05-15 05:11:06
59
0
3d1e9cf8afdcc3f80f827eb5c63ed52f5b326cdf78624935a2a901fb1d2382a4
2023-05-15 04:13:57
59
0
d81c56b875168ed6ccddee93f4fff3ab20d8d59208d1229a18c53e6d38f2b887
2023-05-15 04:13:47
59
0
ac091fc5bd771bb6aec8a63fd2f119abe7f85c58e04005502f280198c490637c
2023-05-15 04:13:34
59
0
6a2bd338e42a5854a173c242a2c31a300a0855db4ec09efe3e9062a645555f26
2023-05-15 04:12:58
58
0
187352042f462e10850f39983e670292fdc05a53cd28934cbf607dcdad9921b1
2023-05-15 04:12:53
59
0
e568ef561e02f599baa4b9dcbbda896dd9deb63a2456fcc1131420e9bc0468d0
2023-05-15 04:12:40
59
0
4b470f24df07b0710044c578a2e95b48ba0c1fc0b71cb2cc44eec2f3447a1133
2023-05-15 04:12:08
59
0
02bf1c4448a2562cfca79b9e23a4f1177a4f78ce5e18e42041658d0908c221f5
2023-05-15 04:11:56
59
0
29a2426f90027e390fb0ea4a53fd7175a64b5c6c4f35e2aab1975423c1a3652d
2023-05-15 04:11:54
59
0
c97262c95c1eb9252b1ffa7ff332602f7c70815f4707663f0d82eec3333da8ac
2023-05-15 03:11:47
59
2
10b4d85d874418458fc3ffef37ecc472f3b923fc97b69fbc1c6393c3aab284f0
2023-05-15 03:09:05
59
0
bca6e5a92502af5ffeb8417b1663ca964313969e2810a39d678335b77171fb46
2023-05-15 03:07:01
59
0
f3819e355c167aebbab9a93504b8422bc96aee1451d2b07ee556d611bf19172c
2023-05-15 02:11:20
59
0
19ca96d28c1962819a67f79aa6165a99e15395d0aed9e201e979dbf26ede19b4
2023-05-15 02:07:59
59
0
d150be00f9e66c5d7f984f2ffff476de0ef39bc53d5a6e86c8a5a085d45331bd
2023-05-15 01:11:55
59
2
dbaa4c380246ff18a912128d5a8d9fd75ef0e3091a9768b07923efd992ef9b82
2023-05-14 22:09:52
58
2
739a9a32323a997e74b35cc266a6e7a1f0a6a678fb9a5877593bc0fbd066b32f
2023-05-13 20:14:26
59
2
c5c3a7357c64708343d37bf57e38f0d8e12c1911e60b92906afd7ed0a730ad42
2023-05-13 01:14:44
59
4
f617bb035372d3384b18bb67ca1ccfd685fa202bd56e82df6b8ecace425a8521
2023-05-12 11:11:00
58
0
8a936e134423db3a3aac9b316b9f9331fcc27722b90d7008e88a6db5c5daf2c8
2023-05-12 10:09:51
58
1
1c33fdc5ee8408cb2c963c8221960f39c9316c0a5bfe888c50c95adac1f4049a
2023-05-12 10:09:44
58
1
f3efddae3a05e0ee4a0fb3232fda113676eef43c5fcab1b223e7ece392cce95e
2023-05-07 21:18:43
58
0
673e61387f150a580f5b494005594da12ac3ae6c833c40dabae633b3d93bef06
2023-05-07 02:19:34
58
0
ef4bd22a5a52c4e20a775e546822de5377f3dfcddfe202aea4804d33ee1900f6
2023-05-07 02:15:55
57
0
1d884c3ccbbc830837404f19a69a881415b9db099a0c76c6e2e26783b309cea2
2023-05-06 22:20:04
58
1
69aeb7f7570d2e083082e5c3274264fa528dfba68d27483eda8501627274e690
2023-05-06 21:18:24
59
0
a70b26f7b8f386d549852744f3f891e620880867a12c0d484c9e6d365e2fb025
2023-05-06 12:17:40
58
0
01c18592026e1a5b6f51fd1ae3c74416061432bc46eb012c0886bc2f3263cc41
2023-05-05 21:14:11
58
0
c085ea7c51991ff2ec0d2d325adf3cae84e8eac96546512323fe6b9d97d8bc66
2023-05-04 19:19:39
59
0
16c0935e7f6fe804cb6ffe1d3496d529cb169461d1c84fa088d6c57e47eeed7e
2023-05-03 10:16:04
58
0
f68547384e2ee51807c677ebdab68e9e62bb70cec8344e53eaddfd1b79084cc1
2023-05-01 19:10:27
59
0
d7b5c578cffe2280e316f6d6cf15b99242046f3a3a88e89ee744dc64cabcbe6e
2023-05-01 18:07:32
58
0
1b81eb31a8d468e833afce692945d8b7cfe160bc777ec50991f86fc66d754d88
2023-05-01 07:17:12
58
0
a24ffb3d47721935d708abee6563530cb3d8ef44570624b352f5d126b0bab528
2023-04-29 10:16:04
59
0
a0f43c5748ada07a12af81dda2460045030f936a8d5081f3a403f85c2a9668f8
2023-04-28 23:08:22
59
0
7ad9b690c8f7699c05149a3bac16ee7b72696b1ddec35081189d72da5d84eb04
2023-04-28 22:16:10
59
0
756a2c16973021636d48c54e2daf9c03b539b131466a1e66abd076f68f52a450
2023-04-28 07:15:04
59
0
1a0ca873412474a6437d33e48071aa0169f8317b5c996e1b10a41791707b2cf5
2023-04-28 05:19:28
59
0

Rule Matches per Month (last 24 months)