SUSP_CreateMutex_Script

Rule Info

Date
2020-04-01
Av Ratio
8.3
Rule Hash
acc6eabda1f66abd202e6ed7f191a72e
Score
70
Reference
Internal Research
Description
Detects a suspicious script that creates a local Mutex
Name
SUSP_CreateMutex_Script
Required Modules
[]
Tags
['SUSP', 'T1136']
Author
Florian Roth
Minimum Yara
1.7

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
13
Suspicious (< 10 engines)
84
Clean (0 engines)
32

Rule Matches

Hash
Total
Timestamp
Positives
VT
baeabc07388e40f1adcd62d1c210c368de391ff9b1b9b22c9c5edba53fc655dc
61
2020-10-17 18:19:54
16
613b57a206a70e1e6a75914a1ff3788f82a5123cc02da253479bcdb3b4d2ffee
62
2020-10-17 18:17:25
0
54682a9fbe23dcb20d89459fbb26eadb77a619fe04a801fc842955c2f5b74c71
62
2020-10-17 18:16:08
16
e0adf19681c6fd79b27c819bb9f29d023a6280f82d7fe25536986d46d3895128
62
2020-10-17 18:13:15
0
9d6b3b143ea9d52fb8abc29b31f9a02dba04bf01e2bf87890e8a3a6e3c944d54
62
2020-10-16 15:10:07
16
cd5fe7cf15cec2c2843bda9c98d0eed478749452a1b83a94501ac9b8d4ec5942
60
2020-10-15 03:04:53
0
fcd3a0e24b21b629223b2dde6b5fb266bdd0594864c8ce65044a7b003106eb01
61
2020-10-12 18:25:51
4
43ec6d5abc62b5f104cc4f7b92aab65be99da8e8cfdc2d4eb6962eb851f8610c
59
2020-10-12 18:16:04
0
0e5ca1905666076dfb8184d16381571d3a4105ba18c5441b82a4a8fa277d362c
61
2020-10-08 02:54:06
6
773229256f975707e42aa3bc06c6be3e9af0d3f3dd35d798fac083e9f75d7de1
60
2020-10-07 23:23:39
4
df2f88ad315f5c9d8d628eb398d3d68a560668734c0ab46b4d6683b737b274db
59
2020-10-07 23:21:40
0
6977610f1af5de41f1c3711b45002b1efccc80996cc65bbfb2a55f359ccfa3b0
62
2020-10-07 23:21:32
3
af3fb565ca620a0c8be3361b614eb525702e16a8c4b8167a7b5c67bc798b2eac
61
2020-10-07 23:21:32
3
1002cf3dc0c89edb89f976526d6740311a34c4bc241066fa8473423552207a4d
61
2020-10-07 23:21:31
2
89816abddd5fb1610dfdbe72a89a6ad4dd838ac8125be124f49077f20c21b7f9
62
2020-10-07 23:20:38
4
18442a2dff12695a63b265944ec4c8efa88785aa7aa68e899b553bd5f78144d1
62
2020-10-07 23:20:08
6
f2841ab8f13c27e7aeee9c5f39e33bb1175c5d160cbfa87912abc0d28f90ca95
59
2020-10-02 16:55:13
0
e66d2356f022e0dfa3af84d4c2fd599c8522f0da0a22da1ed403ad8df53938e5
60
2020-10-01 20:04:15
0
b518d5958e7c51326fbb82f2f7c8ce9e3b3911f3ec1c61fa432cf8476c5b1769
62
2020-10-01 20:04:14
6
93decfb77a3df87964805c4b322a8eab70a54574509d2ed3a00fa43f70fdac9f
61
2020-10-01 20:02:20
6
69396256e12f014ae2e971337023b99338277d8b3f6ab8e24caf196247100be8
61
2020-10-01 20:01:53
6
08163e8a8c77b55fe5f0d32aa75431053e9ecad0e465e0d47a4064707c8a348e
62
2020-10-01 20:01:13
7
87c02b624a86818c419ab2cc38c0a19cb4e69f490ed5aa8a08f136f75e5ff912
60
2020-10-01 19:58:55
3
aba26032f97f2c6bd1bf60bda83283a900fa7259d8abe6dbb94075497245c7fa
61
2020-10-01 19:58:11
3
fd295f77180148104e956251dd7b0b9373bbc1b16db9ee6b25770e44aa451715
62
2020-10-01 19:57:22
4
cf3dec7f99b200aac94d7af24050a05a0ad51d644a91d34bacee1f9a3c905022
62
2020-10-01 19:56:20
5
baced30bc12c458c6f035b15d4526d3c6ef8c86381443b3a5ca67461c068488f
61
2020-10-01 19:56:03
5
aeb63b6b8df80c807af3c448e01b7bdf6c659d440eb4e750411c57455e409a0a
61
2020-10-01 19:54:00
8
83a26782a498bbb1bf1c76a399c2eda27444d184da9c1201f5efe6bf9f82ebb5
62
2020-10-01 19:50:49
7
76179480a8876425c2fa5cfead056065a65c48a2bd523dd9d66337ded34cb54b
58
2020-10-01 19:50:03
0
18d1bae95f9ff10c8863d5635fa944f99a72335d482f9fd5eeabd8031c02ca05
61
2020-10-01 19:41:54
4
d48ed2970d9cf1b0d4ef520f8dbb1113cae744ed2f1f1a3cef9fd9b1aae6d891
62
2020-10-01 19:29:41
5
44f1222d38b8ae750c47a086500b144319411624b372525f52d5e4ed9f4ed54a
62
2020-10-01 02:28:04
3
0efe88c8901c567d34026633ea14be5aa02a8e7dc015f55e778d76c2406889c8
59
2020-09-30 14:58:08
0
c3f8fa37d18d8f47ab74636664322b4dab46b919deb218890bc5f6a99ffb1f81
60
2020-09-30 04:02:38
0
83fa64ac15a338fd0be74046e467553c9dc5df8e88e0ce3df75665170efa9efc
60
2020-09-30 03:21:10
0
ea8f8f565c02f907bc8fa3fd9dd1d4a0a53eea2245b11a0cc5c99034dc7c634b
59
2020-09-30 03:14:07
0
e3eec8b20212f9f24629bac3be035fc0fca33cd83c44bd0a3345380a76b25483
60
2020-09-30 02:13:23
0
79810d0032ff0825304680ebc30adab28692cb0ff1cdb3783698193a6d7f9141
59
2020-09-30 02:11:26
1
7870e46ede63b0beb496577b7fd2a58897ee5cea1cec9af1f70b4f1f4ddcf452
62
2020-09-30 02:10:55
4
6aab8f4d946a607041eff44e8d0cea62ce029e95f4782126eea411bd4481bccb
62
2020-09-29 22:11:20
3
bc7fabd3919677d3fe250ed46d1c73a1601b8d67aecf64a67280c4ae316239d6
61
2020-09-29 17:36:04
8
cfcb17f8555320f1dc31000d2c80f4c4b4ead544278c84ffdff870a42228bbc6
57
2020-09-27 05:02:45
3
3700b34838ff637b47c49160f795b5b7b31e7adba0f791df2907173b3d569c5f
60
2020-09-22 19:22:51
0
baa3c0ec576a3c9aae76b8854b3b7ec74d5ad42c4ff326bc8bbc680a64de9ba6
61
2020-09-22 19:22:26
4
39c246d4c3e597a8a51a7fcc776bf683f0e596a259d9fde3277a4c27d433919f
58
2020-08-28 10:35:49
4
dac346c964dd73f88eab032b4d271b17ebdbc4fc6478e4c7fbc6854c5d1cb690
58
2020-08-18 13:54:45
0
45295ce754b43d364133e7fb6589a7e49e05fcfc0b1163fd435623cdfb28e472
56
2020-08-18 10:46:11
0
4b748c8e9a8e0a91bd1cfcfafc5e2d12def0a442bc18bfb1a37ea5847bfb396b
57
2020-08-11 15:36:41
0
23518194246304c8217b675bafc6cfcc433c3c87077b676effc8846742491334
60
2020-08-11 15:34:24
2
80f381836836f6a782af3ad88251832576cd2c79afab2b50c51668359cf4909a
58
2020-08-10 14:31:13
0
1bded286549e468cc24ee126f8bf75642f308d91467083e7c6a8ce2e1a4a08ab
60
2020-08-07 22:53:52
0
8c7e3946c9f9fb19adcd28769e82b39b5037f2fdaa5dffd41061101ab36125ba
59
2020-08-06 06:01:30
4
e6d6b762ce98a0e362696c0b84f4a266908c973b34cd703580b476d6a80b4c94
59
2020-08-06 06:01:12
4
467f987ded90d181ca9d816a0d53a1710276cfa625be0f366d5310709de8371b
57
2020-07-31 10:47:18
0
e87a234711e75a5fa9bcd9a55c04d67c2ebbd21ff1cbc651ed09859b23f69497
57
2020-07-31 10:47:15
0
4985e9887ecb8a5cc5535c09f4094dce77bcaf6fb651f88930879276b5805e6e
58
2020-07-31 10:46:44
0
43b0300f6d4ccafa60f5d80be220833bd7fce34c2106419fac54581de1b72595
61
2020-07-30 23:28:02
5
6ae86b5390bdd940bf9c441df5031ae8d726f5c64f742dcaeda55752b629f141
58
2020-07-29 10:53:00
0
3e714c2665f60a219e4129af3bdc73201c6d730af471024e033c05db613baec0
59
2020-07-28 22:37:29
6
3b270c9e54b588f36c24be6d8543b046f5b3be59ae4ad7fb88cc7f91ebe14d39
59
2020-07-28 19:43:20
0
93c03ddfdff4ea65fa6207d6dcc350df744b9956fdffd42ab44f82df51297a9e
58
2020-07-28 19:43:17
0
4b5aabdd086c2747acc74fe09193fc23bc00d6ff7e6244f7c16e39a928e046d4
61
2020-07-24 22:19:31
22
609feeb2255e626135ec12cc7051a23ed766a7bd9e02a7a58aea3c9a90aa2602
60
2020-07-24 22:18:22
0
7ef1dfc92f300690b6736503c1250721bc3727c337e7ede7836e1db54ef2d2a6
59
2020-07-24 16:11:26
0
abd737d62fb103f2b61e149288d4408823ab32c17e943931d9a2855394120aca
60
2020-07-24 16:11:10
0
07504f8b1884b02aca544d6cd5e34a4864d284f5782781ea494c823714474bba
61
2020-07-24 16:06:36
6
b21d4bd3555f59261beba774d50970997f576995022b6dc24554a17680bb54fd
61
2020-07-13 17:25:00
5
31afb53838f70dc7370cd3fc5611b4500f9028275db70bbd9bf22bb90c8e3a41
61
2020-07-11 09:53:28
5
3bc980ece171932d0674a49c92de4dbd5a9ff64e3ce460266cbf4d453f053cdd
61
2020-07-11 03:43:04
0
5e371d0c466ac6bfb992e9269c119b05626b8f6180e07514c03a576f928aaf59
62
2020-07-05 18:56:29
5
b42b481835953cc37f26beb8e83cca1b2c8859ba95ef1ae61c8099dc3a56ddd3
53
2020-07-05 18:49:33
5
fdf15f388a511a63fbad223e6edb259abdd4009ec81fcc87ce84f0f2024c8057
59
2020-07-04 03:16:05
24
f765752628da792027f27f408dd26334809639aa17566a96a9ed5529d5f5d39e
62
2020-07-01 06:44:11
4
a6a177c5a5e63ac143bf8e35518dd6472829a60129ec23e43b357c576d5bceea
61
2020-06-30 19:28:40
7
6593bb39dfe34206d4e38a9de03833da94cffad008dc07fbf31cf9170c31a8cd
61
2020-06-30 19:18:08
4
14dbc16cb9221bb7e660cb93a4ad18a1e81cba6c002c23fcd59c600b42f92a6f
62
2020-06-30 17:30:42
6
28f09de82b036b6646d69d42c14794a2fa404691b17491fe55e896a4aaf45d4c
61
2020-06-30 17:13:43
6
16ec739e33a61cf3eeb2f7f53f52a1dedb72f6902cafb237e7ceeace541afb00
61
2020-06-27 08:15:54
5
3b81b38c907d4821e7ced7c494f2ed09890b8aaf299749ab04c1f5955387da78
62
2020-06-23 10:21:09
6
8e988e13ef286b465516456945f9acf9a49b0ac2e25f6833db56425935410bce
62
2020-06-23 04:22:29
5
fdcb2bc1b57c14147d8487576c2f5443d9ae42314124298e2b9702a778dc54af
62
2020-06-17 11:52:35
6
c4f003bd38a730c95e044f162ef11390b0423caafccf41fe8aba470fd1e1b5d2
63
2020-06-14 12:14:05
5
3d7a9c419c7c501593e91fb7499adf46c2223f4312f24167c4b3068624e110c8
62
2020-06-14 12:14:03
6
a60065d0f3e2ce3a30a0959156d98e24563ee4fbe96947a812709c5138457d88
62
2020-06-13 02:27:49
6
a48356a39d514573bd45a895b8b716a1571627c32e32eab3d72fcc99ebcb109a
60
2020-06-12 22:15:54
6
9068d1c4080f2a7eab42d9d1719c281d61eb7f7007cb6e600ccdcf45bfc59a36
62
2020-06-12 19:23:30
5
f66d92e75a529943ca0b5b5e463c47747d2a3ef524bdc82d1dd50d7b304619e2
63
2020-06-12 19:20:07
2
92ab8685096d03ce6d0fb9bd5b98a6619175c3f7fcfd854347e4557ffabd75ed
60
2020-06-09 10:38:07
19
ed6c5543b413fd1981fe92fe096fe50f1830cecdf54c1001e6c07f19e3b95d4b
60
2020-06-08 15:06:05
18
a46b2bfc1fe4c23ec9375f9f11d640a429b3585126d41a0496e94fb0e8ae114b
60
2020-06-08 14:22:51
17
a8c78839776b836234caddf3f8298924da70fb02c0a34298a4c0ab0582b4eef1
58
2020-06-08 14:22:14
35
9d73d93407c7f2f582ad4232521971bf452b7c1e50e6932fcbc18cdeb8f782b1
60
2020-06-08 09:23:49
16
d846266c5859910ef21623ff390c594ccb03c927b1ff3d0ed80b843c95f2d722
62
2020-06-08 08:44:10
21
babc5abe76f443c41345004717cb9f98d49da1e0aefe8df894952ccdba13977f
61
2020-06-02 20:19:54
6
77ae4d9133c9b0379efc06f9ba3efaf445de8704b6591df0c3827a5b93234f9c
62
2020-05-31 13:45:45
1
c525eeefaf99932084fb87a5bebf824c36918162b8cc1ecb67c3f4a11289d827
62
2020-05-29 23:35:15
6
0906e1c280df76c3018e9f4a4384749cf40e99996c782816087168e26e7b2d38
61
2020-05-29 21:19:57
1
6c57c660a712ee72b74347563de5871c187f87de8cc839b13f7587818d2f233a
62
2020-05-28 22:23:47
5
f44d2f3ee41f2703cb4ab870fda716aa10a890a5026f676ecfcf5b4007d725c3
62
2020-05-28 20:50:57
1
663441bb46a642b829e80b23772b1b4eda27e73436208bacdacf25766c77c1a2
62
2020-05-28 19:57:31
7
c7f09e57a2f6bb3a3ff46a09275892a90ed2c2fb0f283f2fdc0f51762e3161c4
62
2020-05-27 01:38:53
3
425e8b0c507265e54af136f6d37142a3aa612c53c6b94c5e93f86e4a2c1ca54c
61
2020-05-26 23:46:52
3
9a1b164f082a79d705e2858e3c8e02b1ff4ae49d44cb76d8757fde02352ff61d
62
2020-05-20 10:36:15
7
efbcdf11718497dbe4db215a0481d4a92c7ed153683239dca5917c7fdd6f3e3f
61
2020-05-20 10:35:59
8
28fcd44fac9bead0df99f58d6b56694812aac7ce30d4fe99b080d21b0a82f02f
61
2020-05-19 06:10:17
5
113ba1c96dfb49e4d1691a6601df6d1e22cacf887274d9cc016e9803d0844c39
61
2020-05-15 16:51:28
5
4f16cf0ebf0f18bf7969b807076d3777b7c8fbbed529fa5769400f3ab65a4bbc
61
2020-05-15 16:19:40
5
2885e191a0871da4a380524d9306f10e7b4eda78c0e6912e74eee3b073d1de68
59
2020-05-12 16:38:16
3
106be141f43a12e5c580868c2dd8ca3807e193e5e56e897c0bfeac97fdfbc1a1
60
2020-05-12 10:17:22
6
f13b34598bf024574a194aad148f98ca57867cf078ad69401840317f14e355a1
61
2020-05-07 06:12:07
3
4034068ec37075484622f7e4c2a5271bef7cda2b71c1e165822fccc2d7114481
61
2020-04-30 19:49:24
9
afaad6808fe3d7b7bca5c348149aebf1553e237009a49712f4383dbe776c5a06
60
2020-04-26 05:25:10
15
9a23b5c0e97bd121bd030ad201d5f489d79fda63c835f68ed0dd69663f0a4ae4
55
2020-04-18 08:21:52
5
773ab592032a6d5eabcd04423cf98237567d7c7e78d39122e1604883b83092f4
61
2020-04-18 08:21:06
7
b862cee255bbfc7a218d996094fde50962daaefed38085c0bef4107880a11198
62
2020-04-18 08:20:06
6
b78faec95411e0afa6cdf4c990364a2a87434ac6c71a5c4f7ec46f38412d6bfe
62
2020-04-18 08:19:36
1
29bf93a0a50fac34e44651581ce13a08ba180d3cb6dcc2cd7c0f4cbf3b32470b
62
2020-04-18 08:19:13
7
db5cb8caaedc1689a80dde58c79efdb12f3c016d7b25853cd2e2e4a3ec386609
61
2020-04-18 04:59:40
7
ef32ced21b1674bbddb5554b27a2b484c754c8b4d0d934ef41b604b758b1b2ea
61
2020-04-18 04:58:27
7
b667b16fb39b1f60c348f747f7d2e13fa8518b599c783df648ba51e765a020d9
62
2020-04-18 04:58:10
6
ead439e96bd01c8c28bb1c335e8be2e1f85296de5a019a6ccdf2d91989a98fe5
60
2020-04-15 10:24:17
5
984033dc5741490c148c165bba43ca469d8a538187f7e9bc8474b12c50073140
54
2020-04-06 19:15:22
6
56b8f085775e091ee030393d04aa442daaf75459fee0d2dc43bdbd8c41c55e2b
62
2020-04-04 22:49:45
0
b40d6d0d082296cfd06e689e87a9695192078c05859134b5e9ce4eb3534fe7d6
61
2020-04-04 22:48:00
3
5d46e730ffebd0107a43482284b97f50bed1fbc60547dccfce656d2ae0fe57cd
62
2020-04-04 22:47:15
0
f3ef56533b1606c80ac5cd54f0b1a62830dfbcea57b4b51b0841b2062fbd89ba
59
2020-04-04 22:45:49
11
ac9b851900b7310ac111e36a7275635c4cda523033f86e4db32e9ecfe69d6838
62
2020-04-04 21:15:37
0
70e7b6184a74fbb2e1b97e9730b6188e1506e4f7f498a6f41dd404ff9ab8c897
59
2020-04-03 21:07:18
2

Rule Matches per Month (last 24 months)