SUSP_EXPL_JAVA_Class_Dec21_1

Rule Info

Score
70
Reference
Internal Research
Name
SUSP_EXPL_JAVA_Class_Dec21_1
Description
Detects malicious Java class found in samples exploiting Log4j CVE-2021-44228
Av Ratio
19.12
Author
Florian Roth
Tags
['EXPLOIT', 'T1105', 'SUSP', 'FILE', 'CVE_2021_44228']
Rule Hash
ffcbec5f7d38fc6c0aa04957adf83969
Minimum Yara
1.7
Date
2021-12-14
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
55
Suspicious (< 10 engines)
50
Clean (0 engines)
10

Rule Matches

Positives
Hash
Total
Timestamp
VT
11
5083c54675f7eec531c7d99813f207c63d728bfbd192b4cab6b122064f6781f5
56
2022-01-19 03:03:22
24
c352e30070e2be14fb7bce3340986a5df774318e55e1103907123983f895bbe9
58
2022-01-18 20:06:48
4
6c3a27315ec080f61e0ed1eb080e0108bcb0607728b9b9c55399f820b25f907d
55
2022-01-17 22:17:32
16
25718a4326ff825fa168810cab36fe46eca0573363a9bf5ed92198331327f79e
57
2022-01-17 15:42:37
11
964ed60f4d590fa97194669fc112b38a681ece5acb0880866f4702b180002e14
56
2022-01-16 04:35:55
12
0c269d438b712d0d75ffcfc41d30df8d9a7b30659aadba7641f59b3b0db986cb
56
2022-01-15 12:23:45
11
937d9b1d700300279d4e13f4d70400e4be282afc492033cfe0a77508a8d2c918
53
2022-01-14 06:25:53
34
d1938d30811ed2e88dc1974577cfd0d81da03e9474c99d3e1fd90c9af46b55b4
58
2022-01-14 06:23:39
5
3c972933617caf9698c4e902cbd4d12e198400f9ccb075c32eb996c89c45954a
46
2022-01-14 06:18:03
0
10aedbd0f2578a1c6582188f7dc50322c8b677fef195823e500d5ef40c1e718c
57
2022-01-14 06:15:53
32
e4ee065afd6d621bb97298ba293354751a763b93c137dceebe13ab7f039e1916
58
2022-01-14 06:12:36
18
df7ba89a5dfeb529e9b3bdec511a30222e480baca737214727ce81ba3c09c92f
57
2022-01-14 06:11:33
28
c0910a4bb8ea0f9796b61c241eab373e044067f1ebef6d3d782380df5d1b5b9d
58
2022-01-14 06:09:27
39
a85592b7e492dc347668848466391b0af261d7684726fdb03869b261f99df606
58
2022-01-14 06:08:22
27
85df5796668c8a37ae35de18df343131eb985d73f4e61d60eebcad547f83ad16
57
2022-01-14 06:07:20
30
a673b5f47148f8c2ca6d8a707db021777f2ff65bced3496a6eee3c734e413cce
55
2022-01-14 06:06:12
29
5414f001563a02dbc89f94a7b04540dc350f848f8acdd600c3bd35af9883c7b4
56
2022-01-14 06:01:47
28
1741b5bb2917b85f854550f919d2960cfe863f88a4b757531ef832d423a8e0bd
58
2022-01-14 05:57:36
27
cec4376c1c9ef8eadd50196481fabc118972942772951ad2259f3c59cd86c916
58
2022-01-14 05:53:14
29
c54d753c9629989dd8ab9ee4e0ef0d2284c9f5de4126cf10d560a81046f4678c
58
2022-01-14 05:52:06
39
b8189dc02998c5dd8c2dcaa052baaa41fe7d36237c6fff61a3cde7f05bdf5c9f
58
2022-01-14 05:51:04
16
97bf8e35ef7802e387b46baac804dca8994a238546c5f449ec1ed008defcab15
57
2022-01-14 05:48:49
30
7290c25ae17a4e7c3f43b71f6538b40249df112380fd7874fd8f15af2e200c2f
58
2022-01-14 05:46:39
27
5b004528b8c42e7c7511735e0abab2436f58a96c7de91776929b7fb0f85b2223
56
2022-01-14 05:45:31
27
5d3c9fc05987a34d831b270aa952741cf1ec16f0edf9a75491ca5a3aa5933907
57
2022-01-14 05:45:28
17
6c521bf22ce8a25e59c0ad7eef949b334ef06e56ee1adf2b5ae9cc8c9742514f
57
2022-01-14 05:44:21
35
1c5397506d70c29cfdfe0c348373dbc8c7ce8fd3dfa1e54501a52b7e2ccf30f4
55
2022-01-14 05:43:17
12
643ffdb5d727dee7f65b1de27c6363d27250208175e3549d1b84715d8e59d9c8
54
2022-01-12 20:59:06
3
5fcc14c704ca90f74a6ee6764b1998a6d0979422aee7c4af34111f18f9d702cc
55
2022-01-12 13:17:37
3
8d05119bfec0f9a0e0f857a28d372f17e4e6613a8a0b1730b561603324e79450
56
2022-01-12 11:26:11
16
9a3c3e892d324bdb69801f0aa0e64b0f5f89bbf0142f04c69cb997296e116e69
57
2022-01-11 10:59:47
2
2e6a29aa1e1689c9247bfe56ad4cbea2096f70d35041e6a77f78b5fb716708d6
57
2022-01-10 13:51:33
15
8b2ab3dbca38b455e9ed04640f7193409a37958e05f92a8e25e4a34bdd2dae99
56
2022-01-10 10:28:09
0
321f7e7cce17ab2ba601fb1e64639bb1cbddfd773a21d44b561837f41436329c
57
2022-01-09 23:55:39
0
87651ceb276e869d40ea85913d33399cd07ec347d62b5c26eec97c0b628313da
56
2022-01-09 23:53:20
13
b46fbdf81d56a352c930e094261e59060e6f795cf675b5d85f2d5df7ecfe5308
56
2022-01-06 09:34:38
14
f934d5cec71978c89a221271d7cd4c13ae055407d8c1428723ae39f993d12fae
56
2022-01-05 07:54:42
13
93c63841fa373ce830b164ef408271b7d3a35a1c9ff2851a7a859a7dbf23173b
56
2022-01-04 20:22:24
0
e70bc967d64558d3cff38a79f8feb4c874de66b74292d82c0542d7f3971d38a6
56
2022-01-04 15:00:33
4
294fcf425da033ca0115edc7ac3454b127023a10f17da5d4021ff0c4ba07ad40
57
2022-01-02 17:20:11
14
2151085f451e3f18c230929264740ca105625e9b2e675da7a201b8e201d5e920
57
2021-12-31 11:05:53
12
a3c5069e84a99e667f8e68708db9bea8bc23234e03d6047c1c078ef6db39331b
55
2021-12-29 17:43:18
11
e615d1f69027d81c6ed5112927d8079a3a679c776651a0bd5489a728f2398998
50
2021-12-29 13:40:48
12
391dee6a051b49629e5db88893f6e7503ffe1650297825cdc52fbdf7046cc1fc
53
2021-12-27 17:39:50
0
946ebdde885af0a1917b6d7b62c9f964e0e4715a7f6778ebb9aa7a90400fca6c
56
2021-12-27 16:52:19
0
ccdacb724427951d8faf3027f55517df07d69dcf114097c55e668446081d9f56
55
2021-12-27 16:52:19
10
0de0caab2ac153c3c1211a6a3c2b111a660d759350711c7c54a615d5b713fb6f
54
2021-12-24 20:41:34
3
a94ee7e2b17d73ec4652baf2ac8e2b4db9b5bd437cf4c65f8be64194bb2dc1d6
57
2021-12-24 01:54:59
3
fe834d883fb15f6533879cc0e37378fdb2a329c9f0c3dab0baaef024dba4b9e3
57
2021-12-23 12:19:16
13
37ddf71ff71a1f78341d94aa141c0497428d44d87959c3050211499cc5c59417
56
2021-12-23 02:45:52
9
3d73cb4e28374e90caf1ea8e43ff7648e7a6c5f1169a77c77fef12dd26e0c6d3
57
2021-12-23 00:36:56
2
2579dd26d5c4bcd2914eb34c2ac3364cf465eff7efac0532ef78ffe0e65f7b37
57
2021-12-22 17:02:44
13
85b86e03ed454bffd00b17c22427bde175e4feb5c73febb857795327be147b21
56
2021-12-22 16:45:59
9
1d46a239bb8816c4c8be0580048904ea298f81e11362d9e20dccecfb4564455c
53
2021-12-22 16:22:55
9
fdbd9804e041e630f35fb98d4265fbb0c225def847a428c4e4da707f882f9cb6
41
2021-12-22 16:22:53
11
265654622ca044ed76514a47b8136bab1956dcdefa2961a1ff49743f08b90cc7
58
2021-12-22 16:04:00
1
da7069ca76ea6535f57d5116bd91f2d47554578c0fbff1dd5fb008ca701dd993
56
2021-12-22 12:50:01
1
41e7cee6b5534a0e8633be51f8a3bb37d439f0ccd8893ed67dcbe6be7dda2e48
57
2021-12-22 12:36:58
34
eb76b7fb22dd442ba7d5064dce4cec79e6db745ace7019b6dfe5642782bf8660
57
2021-12-22 07:12:59
4
c239ad59a46df9685b73d1b4dbfb8812f10fdbbf9cbaef8c075355258fb1e803
57
2021-12-22 05:18:32
0
4c838c9b2511f0e04bd318412f7d8ac68cab47ff6e32ed491a2b29527845abc0
57
2021-12-22 05:17:28
1
01d3ecbc421fd27d90296690e1209b00d4d39802b9b9014b765f4adca4b78d06
57
2021-12-22 05:15:18
3
28c2f62dfa4b1db0476cdb346bc548810601ef2a0d3bc83aad20fb5342de0410
55
2021-12-22 05:13:04
3
39c39c23b5cc8a2eb2091780b269935ff8590564de400b38e563b4f8c13eab6e
56
2021-12-22 05:08:49
3
964745690ae57772d4e7dce72072562722c75861062ccab8492faf97903eb1dd
56
2021-12-22 05:06:31
12
d9cffbfd1305af89fe562e727872b846e2e85da1e52bab670bb75d53bf3a2b89
56
2021-12-22 05:04:15
1
f16a48fd598b817a3746106147b72194ea21d201361d24c6d357d581e559a472
55
2021-12-22 03:22:44
0
8c56c87ce3bff886a23a12f780a9aa304c92da1111f0992f1bbece295bc77ae9
57
2021-12-22 03:22:44
32
4d040caffa28e6a0fdc0d274547cf1c7983996fc33e51b0b2c511544f030d71b
58
2021-12-21 16:30:56
14
64d85a180116e4258c64afc316a254b3f8dbe2960f150221ced9d4ba1c5c3b4b
56
2021-12-21 09:30:42
3
3f69763449f3901cd75848136c3fdc59d04b608a0d27ee86bb6cce3c3d39f090
57
2021-12-21 01:50:47
1
4fc13d84d3b11d3a266f76500d76e0a094896f1a1b88ee9ea09ba2192129bf3e
39
2021-12-20 22:06:08
9
2829563c9871d51f24fc1c6e2ff1b02a7c71b5f9b81fe3e8cc0113b26fe800f8
55
2021-12-20 20:08:53
2
c319e30e4158f138d2f787720b88354a2f9a7faff686f1f6e9a8fd73b2371a66
57
2021-12-20 18:18:23
11
02b8436f860454e476c5694d152aaa3d891d77917ff500a64a636f4c7c097bdf
57
2021-12-20 17:49:49
10
054d8ffe14f79b382639ba5ae2dc471537ae3d0713abb8df9714613b403b3137
56
2021-12-20 06:24:43
10
e458424ebca02070c5fdefe5178f8ddea3886896efa6e3aaff82c0bce356865b
56
2021-12-20 06:24:43
9
9cffe2bbbc0e90168d5dccec28a106406420829cb0b83df7a78136b08649cd63
57
2021-12-20 03:35:44
9
8847237a5989f16429a44f269388347a354f9a790d48177239d185e0caf24e61
55
2021-12-20 03:21:52
1
07d2c7e6ad2f889fc3ab3313b01f2c4fdb698a273309d9674a539bb49e935096
56
2021-12-20 03:09:45
2
43ad88aeed362ea9a84b936e6aa58b75ab3a55ee968f7afce7010003317a340a
57
2021-12-20 00:40:18
2
8b9ae4ce26b6ec9793864f60a564001b7fce252a683361ad0912fccc9ae035f4
57
2021-12-19 23:49:33
13
a04a0cac9e896d12c2c50754f9a27d6127d1b7ebaafb04d45582621b6f91cc57
57
2021-12-19 09:21:02
3
2b4bf51fe9b3b31a5b74753488c5bb2bf1e229f2395fdeb5fb3108ef559ab740
57
2021-12-19 00:46:20
4
ef97ce0c3e985f8f1b62cc2c3d365729c4b4b2b37b60e16e9645555881168113
57
2021-12-19 00:45:18
2
c8d92ebbecbc463e0482b58351aef1850f2f09aa0d74e78d7eea267fe4292ceb
57
2021-12-19 00:42:00
12
de77cfbe0ad844c2eb2c8a999fc45fdbce5140012b0a25698f6254617956cac0
56
2021-12-19 00:36:40
0
d8e73e4e73039f5eaa792a1e6321b082e37e5919635c4a209063084f09556a70
57
2021-12-19 00:35:36
3
a4a5a6083563697c111ac10b4770a6354aa2f7dcf52c33da67c999695fd1df3d
56
2021-12-19 00:31:16
2
d5cb3141feab3a575042877df4194723934deb6340dda4d3b206ce44d9a9df14
55
2021-12-18 23:21:17
10
958beec4a27d3660de247f364de10a059d2a16e0b944ee53eb333e08e74f52e5
57
2021-12-18 12:03:34
13
43cadda987a5a7adbfc2a9aa8e17cdfef45a8c69cc2272cf566ee5388f45e78c
56
2021-12-18 10:59:09
2
1223c3ed0c877c49f032a47c62ca63a9599ab21952ce19c9e9a892cc6a8a5531
56
2021-12-18 06:25:37
19
6e92b697549103b6e1c2ef359fe60116536b670c35fb5091422261cc4c9312c2
57
2021-12-18 05:51:03
18
e72c81e4d9c33d684dd1af4ca9952df3a4221278de5fb748e200708d2e7aaa25
58
2021-12-18 05:48:51
5
9759a200b1d2c39812691047ce9c74fb07d21d07374b02b31c7b08c68b61c17a
58
2021-12-18 01:31:07
3
b06ad71100fec74c44841567040fdc8dc9df182056bd55802e9e184b8a4cb3ae
57
2021-12-17 17:52:09
25
2b5f04d15e459132a5935260746788db39b469ea46859c4a5bb8625f8a80bd41
57
2021-12-17 02:15:24
28
8ad160ddb9d617cf61ff0a7af0fa6d12ae26cf85a5d6e551c617f6c6bb770299
57
2021-12-16 21:52:57
2
0284bf29596bc372dd041edbdf36d7e2686bdb934d2e354e815b5212eef27758
57
2021-12-16 18:10:18
3
d3aa8d62d7d5ed924eafb9fbfac39eafdb62ce7d804cc62385622faddf72a5fd
52
2021-12-16 18:01:48
21
7b09767e5a6317cbea14ff3b59d65938f69fc53e2f21fae3bcc239a672ef50e9
56
2021-12-16 16:42:14
0
5cc24cd7f78d4af2fdb9673bdcfdb65e8e16984f0c44bc7b7e640c6977b96fd5
57
2021-12-16 14:59:05
2
2b21480a191092a98ff09c5cae50ed4fa4c2a6ff9cd46135a17fba4eb5a6bda0
57
2021-12-16 11:26:21
5
ac2235137a347e373db62c083b90106164554178c354364bde2f89178dc11ac4
57
2021-12-16 10:23:42
2
2023097bd3a0ee101b3e7b09df0de8aebe05b53e0632d457069ebb6dfe60cd6c
53
2021-12-16 10:06:29
16
e31b38859934578f6752b43217dd2763e63f583def25b42bfb7592df7e5425d9
58
2021-12-16 08:25:41
5
7f04f29ac3e5d9e09d6964b102f59c4362e6e1fb7c829612399f83a7e62b722c
57
2021-12-16 07:18:27
1
abe7151ca81d60e1055bed053eb045e2ebb41ce49e1b999212867b8b149f476d
56
2021-12-16 02:20:13
1
c8598d32aadce3f8d539c11e50f9f13362679aaefb3e3447b4b16e3d694c6053
57
2021-12-16 02:20:12
4
33102fd2352da9bcb6fd7a0d9f58258daee667f4c930d547f02ffec7700c7cba
56
2021-12-16 02:20:11
1
c0ed2cb0af1d956b717df09180e8bbd4d785d0c0dff124664d354970a746f9e6
57
2021-12-16 02:20:11
3
8fd4416f84d30f0480b2676c0fe3e31ce1e10d5f3d88d10bc6cc3e5d878ba0b2
57
2021-12-15 16:58:11
1
a443c11aea53ecc64d33e63bc8c43bbace7e233fb4a6f4a14d58a9a68cb4d933
57
2021-12-15 15:30:32
1
82444084da0460b71a625154ca0bc815d7920137bbdb3463ee174b8efb234637
57
2021-12-15 14:02:59

Rule Matches per Month (last 24 months)