SUSP_Hacktool_Author_Jan22_1

Rule Info

Minimum Yara
1.7
Tags
['SUSP', 'HKTL']
Name
SUSP_Hacktool_Author_Jan22_1
Description
Detects suspicious FinalShell tool provided by Chinese authors
Rule Hash
abd39e7833e97588d07f93f899aeaea0
Score
60
Required Modules
[]
Author
Florian Roth
Date
2022-01-14
Av Ratio
18.51

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
40
Suspicious (< 10 engines)
12
Clean (0 engines)
48

Rule Matches

Timestamp
Positives
Total
Hash
VT
2022-09-26 22:10:41
0
62
69b1b6921d60a8cb52977b8d14c126df731166f47247a53ba1c13b1d6308bb42
2022-09-26 14:27:22
18
72
c70b2373aa56daa1e4cf6d71cddd14848f5218f3a37ef58474d84f7cc6eba6bf
2022-09-26 14:26:12
0
60
dc994c0715ff0e722abdfdb46a7ab7c617d064e2b267467fc9184364ba62347c
2022-09-26 11:30:19
1
64
9f16c071b3403149fc43c8b6ef8829c8c96d7772cac3b8aa2451222aa9e37c5d
2022-09-26 11:30:16
0
60
d8a47fe51244c40e5f5b9942c296e8e0afff782bc544aa41b11b100e9a46bec1
2022-09-18 06:13:45
9
59
81b2bff58e9eeddd2dca39cdd217f80f573fe1cf4e431224af426253382166b9
2022-09-17 03:10:10
6
58
ca5f8f2a4c93ba3b490eae39a4c65507479bf8256dd93608296d891bf8d8574e
2022-09-15 23:07:42
1
62
4045cf4f511281031f8c7123a2c0eb95183e6753a601bf34deb9e78cfc8ed49f
2022-09-15 23:07:37
0
59
6fab80a8c9b1f869138f8b21b5e46b43f27d76ef3016a3934e28addf869dc3b6
2022-09-13 11:06:58
0
58
f48dff0f21461e442afff16defb31e97a38cb220f040b31bf0254770cf95a402
2022-09-13 11:06:38
0
59
34186984e9d2d16862b7e55705917a5a76e507ab529617de683d97a61fc8e4ca
2022-09-13 01:14:07
10
60
b80606063bea022b5d60a274d7706f0f97c1f15bb81f4e695198bb07b8ba044d
2022-09-12 08:49:52
0
57
12bdd2474fcaddcdccef5d95551b7490d7efab3551b1409572ae967965e5632a
2022-09-11 23:38:54
0
59
d30e575d289c458407ce7dc983828e348f7e8eb421d1f0c136b6084663dcf5e9
2022-09-11 23:38:50
0
59
4bccb18da89416869b4755ce0d1b002a4dbda74f1513dc238648a125a36af283
2022-09-11 23:38:47
0
59
425cb5f48a854787e0fd4187bb131e81bee03490d15076ee7953a6df2a6f20e6
2022-09-11 23:38:47
0
59
445953884e869d0669d4331a429f3ed5ac1ab35e8b3820deff2232b7b50dd72c
2022-09-11 23:38:36
0
59
df2a2607b51021692a997e4a748ee47f674d15733773e7c03ea2dce0fa0f6a23
2022-09-11 23:37:11
0
59
598370db3b7aee12c321361887925ce2d401160c2dac2d7f5012ee237d93ba5a
2022-09-11 23:37:01
0
59
a0ae8257395aa28510818c92eb5ffb04bd3e9643602b1e174692d9b7871514c6
2022-09-06 13:21:34
0
59
50275ffb4f5ffec92fec93e03be51e0e94929f312e0f8c116ac4a0dba94cc171
2022-09-06 13:21:34
0
59
24b58a8f56745f767208142a46fccfd883e7f4b183a36d5cee3edc86b7da96aa
2022-09-02 20:13:33
0
57
697aec30467d2bc7a1eb0898221ba17dcdeb137a5b5225412b12950739655b11
2022-08-27 00:13:00
58
71
e7e2743f3aa22138a21ca81b648a412f8966053c073de747883774d8e5fe2729
2022-08-26 23:41:02
56
71
8a2587b0efb67790128507dfa2c1cc3a0a37a92859f26294d20559df83f45a06
2022-08-26 21:34:56
12
60
7e6cf6f592278018ca214c95e45b41deb904ac311c57d94073c58068d4038943
2022-08-25 13:47:11
0
59
64f440d3c2420de16d3b815428b711e7202507107d221b4b5282cad6958b0c4a
2022-08-25 13:47:11
0
59
5df490dde59f1fafe43ac2154bce6c616a4465dc38dcbb85cdb6e757a5313ea5
2022-08-24 17:22:07
30
70
e529d22e29d64628682982c11b0e684d99f357ab5155b21fcd7746b384fae794
2022-08-22 15:32:15
59
71
48ee42359984358fb07e9a5b03ce1e3ccd3288d2d080729200bb7c63a6ef4a7e
2022-08-15 05:46:57
0
59
75afd6f3d733590e0b769d12c4300f3373f68ef1e5de69c411bce420ab885764
2022-08-15 05:46:57
32
71
de053eaae5bd8747c0ed206090713ebb6273fcec128fc328c93e1364ee10196f
2022-08-05 10:41:35
0
59
7868a2742529633cde7bb05d19221164fbca536df278008bd742783de997a944
2022-08-01 20:18:27
0
59
43e4e940e58a3de0756a79b619690033870549d9eb662d4d2f60485a30ab7ba9
2022-07-27 11:38:49
0
59
1406aa489c33612b5fa15c0d5b5f1b971ed354cb03a2d288647cd516e5291c2f
2022-07-27 11:38:49
25
71
9f8e6bde0b4b058f41fad4c736dde157541f1248b2f3c5088bf2b10bf6ad3365
2022-07-20 09:17:44
34
70
ecaa570384fb4bc041b93b4b7537eb208fb0f486684577c50ac874bd096cb941
2022-07-18 10:09:01
0
60
a73ea209c1d89a534a6b8c02582d55968851130693e5ce54d7575667a5030934
2022-07-04 11:58:47
6
54
46d7a0aec3dbf49fa989bbd7f3e60b87b1b0b27c3902806d9a7197ff55b0ded8
2022-07-01 15:54:50
0
57
a0508f662002b0c57980fa2ecb1f5159f003dee1a0c3e622b2dc9dc138d6c6cd
2022-06-29 18:53:12
0
56
655f82c6b401deee9f90b8375d61bf67d12c54f1f7970991df5756c911b121bc
2022-06-29 18:53:12
0
56
7161e6ff10ad6f910bca796de4b0884081937f55192048a7773a36ec4bc080de
2022-06-29 18:53:11
25
68
80849ea357b7fd861ce89beca80cbb4b7b0f373379e48a67d25da47c2dda834c
2022-06-22 07:01:35
31
68
019151112422c20ef3d9770eda002e88183dd2fd65de38059cf077ca2706ca54
2022-06-21 03:38:22
0
56
8507996f938e2e7e47a6829915503f999954f66ae8c7437f4c09760025eded49
2022-06-20 11:40:51
0
56
05ddf631fa5e1d67e44e904e0b9fef8133d73c03dc642a3cf3c32e906ac85c77
2022-06-16 11:23:05
0
56
02b7a48f0e9de83dddcbdff8372dd71c6e363a84f56947086c787016a699b6d4
2022-06-14 13:20:10
7
55
9134f896f10ab1c9db1a2380497dd1fd596c66d9b6fc24216dfedb304a4e48e1
2022-06-14 07:27:09
0
54
621f95cb64a331ac49c3f50287c4737f1e3a1ca56a58773a5e09c67af77d1054
2022-06-08 17:55:31
0
56
eeeca5a345a257f678af4ea9938af70a4c8e514a109d1d4714312c48991f571a
2022-06-06 12:16:02
0
56
b6eaebe8364ae6ab2319d97c3c06ff5cc4cc4002194f57003f0e3c1f663253b5
2022-05-26 03:07:54
0
57
f35df1ee78ae40aa8977dac90812ece2d25cbdf55b520732fcafc09b8bf62698
2022-05-17 09:23:16
5
59
afce270005cbbc4d01c08129c56d6c4f7a22ad1a5dbb69083119c01d3768455d
2022-05-17 09:23:07
4
59
6ee6a3f0830c4aa00492bd3f79d8daa3782ac2a524fce44990958856e0ebc2f0
2022-04-28 07:56:04
40
68
75028163d4229e56e7cacca4a5c32ff34cb4153b0c01e952c226840d6827eab5
2022-04-27 21:32:12
33
69
187d8b8c6167319490c10a9ac5d0d40681753dcc6b87b6368e8b0392896fb67a
2022-04-27 20:18:19
31
68
a5d15c0e10c4c17e44fe4afc17c95c8d9a57654ca7c8e8da34519d481e6e879e
2022-04-26 12:06:55
33
67
5c9d38741c0a393eb4d13e09d4d3389d4580552b299f67a1a2c74e4bd86e6a88
2022-04-26 10:24:51
35
69
19ea5795898e2a953086c911729efa7ace9cf997f498d5b34d2f8728bdcc61ba
2022-04-25 15:27:12
32
69
d15e39d905567415966d61cad6d341bbf7d82d724f5d5ecbf08d757a73fd455f
2022-04-25 15:27:00
32
69
4ae98c23cff8f8b53ee7c63b8b9d0a0c9deb4a2bb27716cb5966c7b03f9eea73
2022-04-25 15:12:03
34
69
fc035070c9fb0ec3a7d451f28bb0a7e7f68b3d655f1320407bd93631877f3cd5
2022-04-23 03:55:27
26
68
3a1c1f28b1780d9a1ef33a0d84b584040c5be8e70d1538916c257460857661e2
2022-04-23 03:36:47
29
69
24d64d9aabd686d218948cfa611287613c8d50fd23eac2c2becb700def653c29
2022-04-21 11:24:15
23
67
08cdbe5668752245b7ea5b45afa199505593a89e40f75695895a0f333d26ef9e
2022-04-20 02:56:42
0
58
0b41314930cda3a3a0e03a7ff4648abed27e2833650d51eaf66606988116f204
2022-04-20 02:56:37
0
58
458f7c45549ae5e23713af699f93b6319de9b780229ca7e1b6b57b67fb2eab4d
2022-04-20 02:54:33
0
58
0cc8f4dc7d610702cc84fe90091da35ef6c367156067c0c6f4398b1a6fdf9da0
2022-04-19 23:38:14
29
70
d8a8333db69591fec47d8ce3fda5002ade20a8909091106cab1e9b4646ed4978
2022-04-19 12:59:39
23
62
daba4f7e929f1c6ffeb9eedcb30b83e65aa302de87fe468b09a07d43df0821d0
2022-04-19 10:52:57
23
54
1f4027e0ea71eede262edd693f88f9cd78f5eae41562aa2205f24743b9ac02a8
2022-04-19 00:47:29
29
67
6032dff9e6c49a6c522c760b00d513e5a78f5ddd7394d0818093d40de53c8f65
2022-04-19 00:08:53
28
69
79a3544ac00c617c056b36f2542c98e87b51c40531ee72163e0cf4492a93906d
2022-04-18 23:42:10
30
70
8bd426d441d7e2d16f57dc8654480be11532da8fb0c82ffce72cae0d55df1b2c
2022-04-18 20:57:15
31
70
e16a74dde31d7f90e9c2556b70954c6b1611148dd24028d428c1f96f2cb6a39b
2022-04-18 20:52:54
32
69
378a96a74c6374c37d72a40c03726028b1db97a8db7ef7e5eab1526f7a78076d
2022-04-18 05:28:05
27
70
6987a0935bf40e567613ad658b1291b31be35dae4a08602234b7b166d4b0e049
2022-04-17 10:24:57
15
69
55248cf88ed290c6a662fc02fcf95396d4c212a0782efea14bf2882e23bfd277
2022-04-16 22:38:53
23
67
3af161ad23dba8302881be09bd29a4377f6e3f85849ab37530b6e9b650756267
2022-04-15 23:24:55
4
58
a264401cf3b728b2b962bc59475e196fd665599ff7cd3e4014798a784a587b8b
2022-04-14 14:52:04
0
58
696e14c015a05dae5b3e047f01d06f524f4fdf002306f55671de9c1dd76a529e
2022-04-14 14:50:53
0
58
39df0214613e8f63e76531ed2254c207adbb91c5b489ec36769533d146d57f89
2022-04-14 14:50:50
0
58
a51e5a6d7452d535d26ad05f3a16d1c21709c3406bcfb9ed1b33661aa19d6cc1
2022-04-14 04:26:38
16
68
fd811435b387d55814808314da9b9432e1bc2ca15b6b727e280ffb1121052a16
2022-04-14 04:26:35
26
69
4891704cd03504cd0debb25ab1096c337bbb27b3877311e364e1fa04e62a2d8b
2022-04-11 06:40:06
0
57
76d2f43528a97ed03bbe9742565a4df2843e660e186e38d0b99feaff53d5a0ce
2022-04-09 23:51:33
0
56
f3573a24f1612ad6c68eec543b089461dcf2749f6771270425eec3608acce586
2022-04-06 10:08:47
18
68
c52aab9abce29f5c503d117125c6f80c03d98d4a5d2c19ea3f7b59c1083d1cc9
2022-04-03 01:41:41
0
62
a2efed48366ce4e6311a0ff7ced8ac6e83a0ff9a9c028ca778aeb0319d0beb0d
2022-04-03 01:41:39
0
53
a4ae7302b852353314bd2d357ccf1f41cd575271a5e441f62ab5ba7721cc0121
2022-04-01 22:15:43
6
57
935a0477b8568027e6ca72e89315aba5a8ab0b81face3bb3e925a397d7e1d7aa
2022-03-31 12:17:02
23
67
bea7372a4c312ab492208e25d291f09a6071f62d0b4a997e2809926b1940cc57
2022-03-18 05:50:09
7
56
949ad2d46a68c6e0e681805cddfb5fec5644378d8616a9e8164682398c7b5b79
2022-03-18 05:26:47
6
56
e2918b7d8a09655d35c064d93b928d3df8cce0707495b026f7a0d91fcaeefa82
2022-03-15 10:03:15
35
67
2079d76c793759db540cf0d2d9befcb8f0712175984b49743ab6b6da232f7028
2022-03-11 16:37:37
0
54
83ecd5907634ec2da5e0631c7d7ad96caac2910a6515e192e9015ae1a982b7df
2022-03-11 00:22:41
0
56
d8c852e03026afdd38c50e8097aefdd52c054a142802a0094d0392d81c2cb84d
2022-03-08 16:28:59
0
56
62649180306a85dba5fce16aceecae6e76b9852b334dfe96c7716cd2e3715021
2022-02-27 16:46:13
47
70
71698edc61f0f4c260000f5a7170e16853a62d591ef21d44286791e1f37db13f
2022-02-10 08:51:40
0
58
c32bffb72aa8fd12cd6b3f789004f72178f51b77394be9a77749748898117dc8

Rule Matches per Month (last 24 months)