SUSP_COM_Object_Hijacking_Base64_Indicator_Dec20

Rule Info

Av Ratio
4.28
Required Modules
[]
Name
SUSP_COM_Object_Hijacking_Base64_Indicator_Dec20
Score
75
Date
2020-12-04
Minimum Yara
1.7
Author
Florian Roth
Description
Detects suspicious base64 encoded COM Object reference often used in COM object hijacking methods
Tags
['T1132', 'SUSP']
Rule Hash
3cfd9c69ab8fac2e77588f922b6fb97c

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
1
Suspicious (< 10 engines)
147
Clean (0 engines)
15

Rule Matches

Total
Hash
Timestamp
Positives
VT
66
61e9c35eaca24b3ca183dff4cfcbaa49c497db60b2dea9a2823d54c662730cae
2021-09-23 09:42:05
4
68
1cd719771890f9ac533824412a5774376d6137d5a0bdfed0a103711fd9ad7c97
2021-09-19 14:31:52
5
65
35f4f565aa8b803be54911d36e9dc525122666102ee400b85b0daf62af0f3248
2021-09-18 21:00:30
2
67
5780c7f926183ef1599c4dd1321b95514187bd150a453ae236b58dc0a3750636
2021-09-18 20:54:42
2
67
b78c76576a204a89952fce3b07221ae4a5cd0ada528066418680561e84f68289
2021-09-15 19:54:45
3
67
e01f64c48a760ca6e57eeb9104ee4c1de4a2ae69d48b634c08635350991ed3b6
2021-09-13 21:45:55
6
66
d141fecc0206e7814c04016ac7ba454a30fb67a34e53edeb53573e21236f6ee3
2021-09-13 20:45:14
2
67
d356e4eac8e60463e787193ca06d4ba0e54947bc7938cefd949d9d810aeca60c
2021-09-13 20:42:27
4
67
0c69976fd291a25827181de3491963521e4806540cafd91c63de61b649a7d186
2021-09-12 15:44:26
2
67
86caa78f4cda615faa6d9283438ea459fe14f82036d415580f1d88457e072144
2021-09-12 15:44:24
6
67
67fcd8da6c8a1a14c283744bffcdd9765c76b93a9566e16f33229838f8d81953
2021-09-11 16:26:01
1
67
b8709f56a94b9a5e8aba85c0dfdaae6c0105b926acec41da82b827138d683a3b
2021-09-11 16:25:53
1
67
f4e9052dbb0eceecfca5bb2e238741972a12f0d0ed505bc45c83d0129f95b7db
2021-09-10 17:59:58
1
66
232b81811720b323906eb6b5d3a28c4b276ab83989873e253587e63a9d2f8c18
2021-09-10 12:19:54
0
66
796e22aa9a439215dc5deecdab1d9c275e5a03cb4fb237178b61d320c07e73d0
2021-09-10 12:15:53
3
67
15e50238558aad04f432757cf5bdbe2f96dce933f8d689fe185ffb2100ebdd3d
2021-09-09 00:14:37
6
65
cb3ad1adbf1a1f531dbeab5969c20b666acaa19b5e3019eb3c9a64ec0e8d23fd
2021-09-09 00:14:36
1
66
7b9fcd77fa8f72c624cfa1becca0e974481ff7c267e00b1290384783ef8f4201
2021-09-09 00:14:35
1
67
fd5fa4b10bc6e6a125a4e1e1ad5ea3bac9ec2e81dc27460cda7afb4f0ae579e3
2021-09-08 23:25:27
6
67
85c2ca563a48fd2da4305df4cb9621672011a42cd3603e3485969ceb5a51df15
2021-09-08 23:22:07
1
66
d73b13a063cb9eec68cc22305b457728a864c7b4407a371b7de621a295496dae
2021-09-08 23:21:02
2
66
7fbbc072e7e06377880b7a74c162e11b3b688833128a664320f4bdf15ca7675a
2021-09-08 23:21:02
2
66
8894cc64bccd1001fb9047023ead2b4678bad1c246956f156ec1a230f23d6aae
2021-09-08 23:21:02
1
67
067570cef0926bdd058b7248309cb16a0e9c18992430487897c0636173a110c4
2021-09-08 23:21:01
2
67
92db1b11dc831d5a709d385db74bdda45d3005b72874691742f0724813cb44fc
2021-09-08 23:21:01
2
66
1aa6b5e3157f58a4c9fd5258efac4e547fb3427c5800cf3dbe1e8ae6417e2e83
2021-09-08 23:21:01
1
65
87a356212390eeb936f73376474137df178263809b6ed8c554163fbfac32d911
2021-09-08 23:05:31
1
66
69d7ba5f126f5504c619e2c37a039eab28e0b38f4204cee35cae468b3de861bb
2021-09-08 23:03:07
1
66
0e06abd7e19193d799aa71f66272054a4a4727e940764881ebe2ac9f72f77ac2
2021-09-08 23:03:07
6
66
803386b52580eec54b3e9638bffd397d1bca4dc4b8f58d20aaa63972a0629b7d
2021-09-08 23:03:05
1
67
017e1a13ffdbba62fafa14e41bf2a20fc69881f92497e5103777d5019ed956af
2021-09-08 23:01:47
2
67
b5a8cf10e58df77c77ed9b537c01cb47c3a876998fe4093b621eb9e44e3e6ab1
2021-09-08 22:58:22
1
67
b609ba0a0d1f9f66e1a21880a979686f909292d4034473c00847b6a775a0538a
2021-09-08 22:23:50
3
66
ea211da6e54dcfd3ddeb4e1c371515997f144d59203501eeb993eeca5d782d8d
2021-09-08 21:51:05
0
66
e5527793837d2a425aea1888788539e8151d5cf6374aa3084312edef8ce04e12
2021-09-08 21:37:06
2
67
c02f362c121a28152770ab2a3354bc71bf26bd22867a1f9ffe7fdc4ba6b9ce91
2021-09-08 21:37:05
2
67
6cdea460718273ed1ce7bae90f01f4acee6c614f0495d503ffcad688ec9b32ee
2021-09-08 20:48:43
5
59
74e8fbdbaa402f9a1a720c5e737c4727b2eb60592367abbe7b2b8132eb32d42a
2021-09-08 20:48:43
1
67
3f19644562e0e3ec2cf8480b9c7725e567b5e55b1bdbd1b6f677884039fdb560
2021-09-08 20:35:15
3
65
289e9947fd659e8fc9d633e19143286d117a85f08240a00052cb66daa4f80a92
2021-09-08 20:32:58
1
67
97629168c503edfebf9effd26ef347bf9a946e10800180d19d877fb9c08326bd
2021-09-08 20:32:58
6
67
8449044eab323f4110940757f5597181f40f9dda9323c5b5362136cd17ae305b
2021-09-08 20:32:58
1
67
3d9f3f2070f757eae66026f2b42d9353f21f1cfa134fd45a3e88956aa319be76
2021-09-08 20:31:51
2
67
3321c5cf12987a708ea5892262051a6fa73a8bf9ec0eae0c6e357fe8035e0250
2021-09-08 19:31:26
2
64
04015ccf7c7256623361aab002eaefc686fdd1bba39f56c1bfa3ec8c7dfaa9dc
2021-09-08 16:48:24
3
67
cdcb67d1a3f55a4a462074cac3cc64f2785b638badb352a21969b905871eb0ab
2021-09-08 16:47:22
2
67
56774b7373dc1ec9565a799d4d2d782e0b10b8e5832f42e04755f3c5d334b5d2
2021-09-08 16:46:09
1
67
409908eb0b504f31113104d65a70a1933919096f9b2a05ca5b79373448675d87
2021-09-08 16:46:08
1
67
f99b27dbfa1ac4869280de5ed97f9d9d22c6c3407feee5594059f55dcc80ec4f
2021-09-08 16:46:08
2
67
ff6486a9dcc8a7c895049257636549c1a2a50bbcd173fe6d226f8a14dac46c1f
2021-09-08 16:46:08
2
64
fb49e2699c39273db6e95d724536c4504ecaba97908ad942715fb81b5c52d76c
2021-09-08 16:46:08
2
67
f2711972fd91c5f791391b39c492c4208dc0cbe6bb3bb86e0f1aa46753c85c54
2021-09-08 16:45:57
1
67
b5a3eb12f7c42e280205d91ce9373d275d1857e4168b233a497ab755086a02d9
2021-09-08 16:36:33
1
67
e0c4f17cc796f937e5b33f90b096c877b25f67c31dfb7783aa05cf39f50325e3
2021-09-08 16:36:30
6
66
e93f3d7efc9e177459cf8b5ba859fcee4d4223fea371b2d7ac9d20cdd4f9c132
2021-09-08 16:36:28
1
67
c1fc7a6648aa073c1856610e4d91629156bd6bb129633feac5ea401edc2c941c
2021-09-08 16:18:18
0
67
b1eae934dee0f22b99ce990b1f27ac28694ee5b9cb75e5bc2a1d2566a0e4d26f
2021-09-08 16:12:40
1
67
1939219d95fce679f9afc2d3d74d796d84f636bd36f1fb19cba364e4c9e483ff
2021-09-08 16:10:30
6
67
1cc6316a88648b806b40826d4e562f3e1ff0406b8e6c5b03ca2ae1a523d2dbc5
2021-09-08 15:51:04
1
67
7720a5de687aaf3b98c44a77fd5743686ffe96251413c72d648fed0a7259b6eb
2021-09-08 15:49:56
2
67
02107a1207bb76602067d6d8f308f95f5862e77b307b19c5a04d450c181028d4
2021-09-08 15:49:56
1
67
10c045bfeaf66f8ab8f8adcb22c21f8ea8d05a4b97c7c5386d7fb541d4234b76
2021-09-08 15:49:55
2
67
37dd08cdd44e84f7b65f5c7b43acf862b9e29810abffc11f8d74da8c2ed20314
2021-09-08 15:49:55
2
67
2c60790b29f26133e3ede4362f2c9560ab1b87237a78eadf27e53e9bf4717722
2021-09-08 15:49:55
1
66
26f3d6a0e995f0edb9a05717dc835d659757f8d7b72fba5e0e8a8d7ac27dbe6d
2021-09-08 15:49:55
1
66
0960ddfb37f2088f69396842ee8ddfd607d4c0e6577c26bdf0a09055f0ef6707
2021-09-08 15:44:19
2
67
1d0502eb9d52f02c78de566e3a32b2ced5fac558e579f15c6bef794697469c34
2021-09-08 15:40:51
2
67
03506d88185351cbc6d8db3f53a312e67fa947ae4bffff961dbe1669f3dd6979
2021-09-08 15:40:50
3
67
12265bb35574b03b61cc065a935c7569b6548e3db5be255b79ad82aff78ac907
2021-09-08 12:26:07
1
66
827fab8f8441a409a5804c67999518899ff6d8acbdceb249a1ee078a4950b2db
2021-09-08 12:07:08
3
67
9805f08e58170f81b81a0169544f2c70e526f4a95787608db82c336cf4312fcc
2021-09-07 20:42:28
4
66
7e0db8472610075f78a71b88be45b75643c044193829025549dbb9b5eae10a8f
2021-09-07 20:41:15
3
67
1b134b6de00e0844a3be509c1a46138605767b1c138d1e57ee01f0da1730f3bb
2021-09-07 20:39:45
4
67
f4e323d97eeba89cd7665f4f07982243591fe37078024eb59fa0e26f4a89a84a
2021-09-07 20:39:44
4
67
ad206aa3760599cb88102fe3802260fbe9e83dcb77362cc688e6faa3192c7fc6
2021-09-06 17:24:43
4
68
af88f635ed28e34c3f1e896ae2be5410c4bce1ac416abaae2aa4f64227b1e851
2021-09-06 17:22:08
2
67
9e6bfa70420acea110f268562040bc3f3e0507129ada213c15ac855cd9f7a396
2021-09-06 15:41:02
0
67
94c4ec69bb4663711f6b0dd1ceaae81a508428a9ba33d5cf4db40c2e1ebc6180
2021-09-06 14:14:54
1
66
8582872adb0f7e746db056747f46cbd95df9be0b19e8c9414177ae5f63420e99
2021-09-06 13:14:55
3
66
7529f3a0b4329caf624686c322e383745acd0774e324b8e2d5d2bcc3a573c6b8
2021-09-06 11:55:29
4
66
6ea120d0de5c99ba8f2a372a26d0efe636a1651e4acad92cd5bbe2ac0a887e0b
2021-09-06 11:16:26
2
66
5b960806c52107dd7426384a80228ecd480172f988463f79d728b5f56b1ad110
2021-09-06 09:30:11
3
66
9a82db2bb531d21554d55c44f4d05685ad87c3f9a9b3621d4c6e973bf15a4ac7
2021-09-05 12:59:27
2
64
303d05247eccd628e805d23823e9d08a16257e3ccc1778c14ff08783183398a1
2021-09-05 12:58:25
1
66
fe5b5b49c350659919693f79ec1fdf4fcfa3d0b2498e80aa423af6a720fb2416
2021-09-05 12:58:24
8
65
8e126e16eec3282b7dbb57b82efdf8052a02c1d9b6532b6a4c89eb2087112466
2021-09-05 12:57:16
1
65
97357bd22e26b68da00774184bc02fa86b7e45f99383c54420b9e4d304cfc414
2021-09-05 11:40:37
2
65
0753622257e9e8504a0b0c7287adcafbbe8d4aadb1b100fc36b799ad78aaba60
2021-09-05 11:40:37
2
65
7c1866aea3ff91c5907d5a53e39edf47b21c84c2fa1ef55c19a857cd7e866420
2021-09-05 11:40:37
2
64
124bc9a47755ff36e69c872d0577b5db2f6085dec78b93a78a18bd2ba1a2c8ef
2021-09-05 11:40:37
2
65
893f67d4701c2d5baa21a684a6ae20e3940c01523b86785ce7cf20bbc6da7a97
2021-09-05 11:31:43
0
65
439bf8596affbaf87cd5da0132df1ec2e3aded7882a27b38e49aed4552cfef70
2021-09-05 11:22:00
2
67
413e40fad76d6e70d19828966403fc83a7c33381d0d6c2b1f663f7ecd7a07637
2021-09-05 11:20:44
6
67
1b3e6afb03e298729c9dac23429f9eb0146dae3945fad11445083abe09fb1d3b
2021-09-05 11:20:44
5
65
1167235aa41af09773e798f661af59a811067a1cb2b67d9e4c4224e67a1b9138
2021-09-05 11:20:44
6
65
c17e4701a8bae9d4b1c5add6c183241e021c5cec51bfc2e53e2b6a2c71d4398d
2021-09-05 11:20:44
3
66
5b46c3fe7b97d67fd042340c9432d8503ca5edfa7d15b3d39374eb81f56ce993
2021-09-05 11:17:25
4
64
841b3cdeda655af5784da9bc25fbe452cb33c91dd4976592eb685f90ddd31f8d
2021-09-05 11:16:14
0
65
7ac7d8efb6119be12360e98b596371673e974aa67ff547199c3d69d6eff2b6a1
2021-09-05 11:07:21
1
65
eb57d8bab71fbfda0ceb558940f85f7bdd69caa677ed78042b2c9279d19ae82d
2021-09-05 11:06:14
5
65
e4cb1176b46c26f2d836698f7427f27b641b35284819174a41f8f024e0e79889
2021-09-05 11:06:14
4
65
0948581ae002cea1637fbad9973c39c38d473c90d8e8b5be7b87cd77a16b0b9d
2021-09-05 11:06:14
6
65
bc565dcaf924850638e94f0f08c9fe588fc6d38134a8cef76b187e7339b1bfa0
2021-09-05 11:06:13
4
63
01eb31b82b3ecd4d7fccffdc2d70c7b1f3dd62008235f62f73da265e5981b30b
2021-09-05 11:06:11
5
65
050c5b5a2000d3a8c33e547dcabe0aa4f46d3150e945e0abd7b63812f907a6a1
2021-09-05 11:06:11
4
66
a858b87a4a2ed1684e0e75b2fef790ec180cb5f65d921783dcda0bfdd89d204b
2021-09-05 11:06:11
8
64
bdbf096015ce8afdbf5e2981fc037be45b31d65b0b797879b3cfe30877db1d95
2021-09-05 11:06:10
5
66
f3874ffe8b504de328794108dca0305f80cc01e00f8440049aa8b9b68ee07bac
2021-09-05 11:06:10
5
60
d8f09f42f33f4b158348830b95be8c6c7c0f7803938f93951d919717dbb114c3
2021-09-05 11:06:10
3
64
c4b5e955aee60c005620eea5b3f073e4d6c708d63ca1868793786a2f8a50aab6
2021-09-05 11:06:10
3
65
0e041e6aaa4184c0a4d5c6488d35233c9b0e356faf579a0315dc648ed383afef
2021-09-05 11:05:03
4
63
8dc5d0120490de050adbc3e1c38f0c52ff004980fa7cf942a0c0179b4f15c5a5
2021-09-05 11:05:01
5
65
31f45b4eec9955bec7ed127a4e9f1995862d9106acbacf89c3f129c4e0bdcd56
2021-09-05 11:05:01
4
64
0fcecaa8e31091dea64def0a9b3a5b91340d4152ec195b55b056f113036b7309
2021-09-05 11:05:00
5
65
a324fab788897a7c6c5625854064d0cf85f1ba0f35f9ebdd5f200f8eb68eb0c5
2021-09-05 11:05:00
4
65
87d294bfc1b949037bf7c67aaffe0f166a3d45f77163f2ba4a7516ae39bada0b
2021-09-05 11:05:00
5
65
b8d60c0582660feb3c335b950711821dc41bb8784da5b314ee3317258facc513
2021-09-05 11:05:00
4
66
61903e1d3ca23294b2848e0de40bcdd47ad2b58fbc3ee06f53b9b3a92b26ad2b
2021-09-05 11:04:59
5
65
8c33b962d1911fd23ce7d34c821c9de5e402a8fce54379eb5bd999c16edf3432
2021-09-05 11:02:38
1
65
6590d32ef987ce0bd83abdc1a2d792cc7281a54be6994c66bcdea2e9de5bc8f6
2021-09-05 10:59:21
0
66
686ad81b444555e4b71e0e51f075d5296f8a123142b6664bca3ed59fd83cc032
2021-09-03 22:13:21
1
67
1876e7baa6252062e0983b88f8f19d3b2370d61e44582158e3971bcd5fb38004
2021-09-03 21:06:01
5
67
53f63fbece964732db16b8e5bb2e46cae6b21f4510dd6ebaed049de52ee8de12
2021-09-01 22:16:41
1
67
1ca6947aaabd436df5bcd5f21becd53cc4d1c113494cd07c1060557bc23ec70c
2021-09-01 22:16:40
1
67
ea3cf108f3db38f35f4b1a611eb19b680d87a4a44e491d82606dbe895db0bfaa
2021-09-01 22:07:49
0
68
530c436d8943cd7aaf2b33802b8596d24bf9f7f1a4f6959c4539f42c32b5141d
2021-09-01 21:50:20
4
67
895dbf42e7328c4988273d5b9b2620cc7e83ff71c946c186ce6bafbc45f1fbfa
2021-09-01 21:48:08
2
68
5b82356d7594afe6209bbfbfaa9c954f4b870de21b5d1212697d2f4db7817eb1
2021-09-01 21:44:46
1
67
820cc65c484fe06f062ed15a14d283c39e6338263821aba4d7fb9a5e949f4f87
2021-09-01 21:44:46
0
67
e6c2079b8141704b2896c9f2b1b898df3d7dcd7e1909e926370ae480f9337b86
2021-09-01 21:44:44
4
67
ab3d9bd827751413508db6d441fc63d94f1b93d445499b9d4345ac7d5bd52851
2021-09-01 21:21:11
1
65
cfac26e7dceea55e276148a8d1d479bb6a676ecf5d6b481dd0eccc5d4ec169c3
2021-09-01 21:13:16
1
68
8ecd5265bba0947d422f0f72c2a9174f67b66847d0eec1d50e181cbd20b056f0
2021-09-01 21:13:15
7
67
25b775b2e19ca5f74d5553a4f34d7637dfbd8768bbf8482a84319dff86b6acbd
2021-09-01 21:13:15
1
67
77222300b9c932de0de85347e845737172c133e05e1dff179d070ad35983cbd7
2021-09-01 20:42:53
2
65
839c832fcc73b555f6c2e72e5bd1b7ed935b39d4dd95ffaa5c1c1df7a60b688a
2021-09-01 20:41:42
4
67
76e92d4d5c5494a81e644066ae923ddcca060fe43337e0ca714359c42124719d
2021-09-01 20:33:51
3
67
1a0ab0af31ac1d8dc45fbc281637d9f244d10c2e2fe68a036741fbff07175e76
2021-09-01 20:32:37
7
67
e53d940d502f7f4d455d1f7ca235fc875cd9953712ace32f85cb60f8d7d009b0
2021-09-01 20:31:23
0
65
0e3a9dcc8b8ba07bfd218b2902fcab3a37fe5fe7793b60e0b77abbfa2f7497ac
2021-09-01 20:29:04
1
63
eac5f57655184b389b4ab82091eb9c87d4cf3607e5adc6b0675a87046a45bc3d
2021-09-01 20:27:51
2
67
413c3440e1291591785f16fabc682e585fda3db93d142acca7b31916db39cd66
2021-09-01 20:27:50
1
67
d8bb62f05ccd502941f117d3fc31db271c16583177820a6f4f6c82a7d0726870
2021-09-01 20:27:48
0
67
7cd5e076561e9fce9210afe209bcd4e68bdf267aa49f9b4e454b2c8348125370
2021-09-01 20:27:39
1
66
c8197ef96167d7b3109dc7c868a561e25dc796817cc47d4565d7752d956cbf49
2021-09-01 20:27:39
1
66
85ebaa0d311f5f196876ff54394913b9fcaf1da5b866521971636ba3d76bd1bb
2021-09-01 20:27:39
2
67
217287301b0335862076c8d8889f5a9bae820ddb9d8e39d0b00bf538415400f0
2021-09-01 20:26:27
0
67
4b31f9646beaee6cc559d76990f92048dcd3fbe98773fae997470f7384c2c383
2021-09-01 20:26:27
2
66
0d14bba8314b29bff44b16eb8f768157460cce36815174e97e7f29533c6334f7
2021-09-01 20:19:27
2
67
a24bdeff04b5ca0d69abbf4de8e0002be98644f81031388730dcf79958e65f8e
2021-09-01 20:18:19
6
67
4ae00b092e57a6c01110b5724f631ed047d1c77065a41a83a2b74442f0a99698
2021-09-01 20:18:18
0
67
9b4bcf025da4439a4688f307f508dbe4bf87df28a371e6990fd761a9db6616a1
2021-09-01 20:17:16
1
67
80c8b454853020ba3354a0c09cb217eba025226a80b35228aa4e7fa3c0045cc0
2021-09-01 20:17:10
1
68
1642f567d307eda77e07b9d9a0df2e363f320c65d684f06e0283d0a588a7b3d8
2021-09-01 19:51:19
6
67
2f0bf00b0eae3b1af30919b48955b46dd75d016d2fd2e808d785c22adb2574bf
2021-09-01 19:51:19
1
66
389478948748d6cce7597cdbd60c90b05d719e6faaf5a9e9dc661a811673f051
2021-09-01 19:38:45
0
65
ef8ec46f464147c81a765c6e0285d926426dbc9c06a09d97a50d2002d7cc7b2d
2021-09-01 19:20:43
1
68
bed6e5e5b59f76d0407f2ef083d1b728d2b5e91a3ceb52607a8129a46d9f0ac6
2021-09-01 19:19:34
6
67
d2f4515cdcd98dba30ec00550a7e1863d18e6c2742363e792b5a8ffe732c8687
2021-08-29 13:40:48
1
66
f11f8a89248e3f752692baf7451bac7fbb1bfe19c9dc43f449200704c1145ca9
2021-08-26 12:24:32
2
57
969748a5cd48f235516a9c00aba08de1b0a39124ecf0ebb38e5474cd0fcced43
2021-06-07 17:30:02
0
58
f05534bd1e08991b2a3c25e2bafc0a01fe8cbaf38f5335c2b6fe13ce173f0459
2021-05-26 15:19:01
7
71
1685b3907cdaa774eb01c3adc6aa6453ec5516ed5fe4ad67d9f950dac1c5af19
2021-02-12 19:23:14
47

Rule Matches per Month (last 24 months)