SUSP_Imphash_K8Tools_Jan22

Rule Info

Description
Detects a suspicious Imphash used in a set of chinese hacktools (K8tools)
Tags
['HKTL', 'SUSP', 'FILE']
Date
2022-01-24
Required Modules
[]
Rule Hash
098fbb50e4f8d89f95205c96c528ef60
Score
50
Av Ratio
10.91
Name
SUSP_Imphash_K8Tools_Jan22
Author
Tobias Michalski
Minimum Yara
3.2.0

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
34
Suspicious (< 10 engines)
118
Clean (0 engines)
1

Rule Matches

Total
Timestamp
Hash
Positives
VT
66
2022-05-24 12:08:22
72bce43a35bee8eb7bb69d477c8c0779b6dc09ec9dd19aa73f4b948317be5297
3
68
2022-05-19 06:08:50
68b2031f6839fb019c00f4bba0dcb1ae73cdd34110aedc576929ed498d628c28
7
67
2022-05-14 08:52:47
95f72cc778aa069cda413ea01e47b43f28a985f36948a58cce28f3ffd279b118
5
68
2022-05-11 08:53:39
6c3eb047a52537912f9a75c1f60755676d2e4cb5add32bc7a282d67f2a82ef38
7
67
2022-05-11 07:59:16
fac3a981dadcdc866076679a0cc2d5f85032616b0524e128fde93f8aa8fc1161
14
66
2022-05-05 02:12:40
523bebbca54a964a18c9c83084132b08baec6c3d621a499decd44f536f7df0f4
6
68
2022-05-03 14:36:57
1f4c7def3182195586ba86768cb257ba9fe60c7ce759fa046ba81a816b95884c
3
67
2022-05-02 06:50:46
028cad2a8d683d4c068a51b57c12c74baf06bec2a5bc8073510d16c8269265fe
3
67
2022-05-02 06:44:11
034957c85d2ed24a1b9267d9dd43b9b7625c43eed04fe2a9dcf91fcfdd93923a
2
67
2022-05-02 06:14:39
0261e8010442b30f9c9875c4b36ec302a0ef044ecbe16eeb4ed5e0fe4ee4727d
3
66
2022-05-02 06:09:46
026f222b262f7dc4c03be58d7f3680c812d8a379f85c11accf3e2dea7c0dfb72
3
66
2022-05-02 05:51:45
033344401427e42f6d06910a2ba9d0f95926cd795392088418cc605acb1f01a0
2
67
2022-05-02 05:51:29
03ef122ae9bf897fc1584e472c35ec5f16a45414d32cd0c216c88006494a5ebb
2
67
2022-05-02 05:50:29
03794d867befa5f20723175ff732fcbf982a65d9d16bd201097fbbc1365a5022
3
68
2022-05-02 03:56:52
25b46f96ae61cae6f0edd35460280a24b0febcea270cbed7e8a05d46b698bd51
6
67
2022-05-01 22:34:23
6d674c1f603e5f2bf3a8162279300a86b98447975ed121ed075f94b731bd2d9b
10
66
2022-05-01 04:53:41
038239eb09fcc4bd606a1609f800cc3f3a85a574b219e8b50b216de9952f6a73
3
67
2022-05-01 04:34:23
03d7aa111bf572ecee0905132ef21b31ea6083e614ad82f6b721932ceb07c49f
2
65
2022-05-01 04:34:17
02813476a6dea6d5aca556f3601b3b08c2464e9dd413e56d981df5073146bb93
2
67
2022-05-01 04:34:15
038f5df978fc225f5d2367011e2067d74a8ed1feb93f6700e4ebd0ceacd0fa26
3
67
2022-05-01 04:32:45
008b86de728236e8d9cf3a33737370ee112fb79fe3faa29e1517128bc89682a6
3
69
2022-05-01 04:24:23
0061d8b10f58cf63ab859e8678d61dc942282e1cccb43bd3bce8196e785e87e4
27
68
2022-05-01 04:19:08
00e083bfbe3fd9e01371fb83a0b2ed6eb141db360bb8f9363ba36503d3acb2e9
3
68
2022-05-01 03:55:38
012d3434c71832c2d33398f1fe525cd11d1c877e594052dfcd834a5c007c2d6f
4
67
2022-05-01 03:54:26
00bbb3f8c272c4e6d1f572b6524d60ecccfb78bc38bf10787b82b46426bdbe23
3
54
2022-05-01 03:54:18
01da7836e9dcbf22e30769559538836e85807464892c3219eac3e762f55a0594
2
67
2022-05-01 03:36:51
037add82e9a97dd872ebb15266c9c79b82e87dcbfedfa29866053536dd63ac05
3
65
2022-05-01 03:36:46
0167cfac073394156dbfee4c87cebf49895198ef29238d4e1bcd08d34cef8d0a
3
67
2022-05-01 03:32:18
00baf32bb1b3e7117e1a3f4d285c603896bfddd50c7b6e4297b91e7f8d181b23
3
67
2022-05-01 03:32:15
02fc00860a4e509b1d3b99e4b81a9597bcd18bb8b95375e34c89b93da222b156
12
68
2022-04-30 21:22:05
53b94a1a73e85a813b2459d0e7c17d2a1545927a2b8b2364b506eb1728e54a49
5
68
2022-04-30 16:46:31
3a51ead5684ecb4453ff589221b31feef3732e8bb1164e2683cc0db68550a9ec
9
68
2022-04-30 03:01:26
01564f7feca8ca1615b3fa04f0c62c22dd7f839f92a93b9f15558d5effad0160
4
68
2022-04-29 17:58:55
44538c4854e99451a45800ab5819f0322c895ec2ccb92d70b3d496dc75fede7a
6
68
2022-04-29 00:20:49
0268a8bfb8b5b000d573981a472d3cd67265bb7f3ec1287e70951dc530084afa
6
68
2022-04-29 00:19:30
023ef920e03f2eddfbfc66b3dd21c157c659d17554dd4ae6a8a06cf3d2fd96f7
5
68
2022-04-28 23:42:03
00a3d2d88ecac836265c84bfd260e2dc3d649d0803174b1aefd1752fece1f20b
4
67
2022-04-28 11:17:43
13f5ff0a536b7f6da275b76f8cded6757b8c2452feacd8da437678fcd9bbbcf1
9
67
2022-04-28 10:38:50
7d98364cffce08ed48a209ce720999bf17924df8edd7dbc7997c8db31b02c4c5
6
68
2022-04-28 10:27:42
49650cdc045164dd4a52248fb7f4d0147d1fe93133df7066870eef577710ef92
2
65
2022-04-28 09:54:01
cdbc9497ad0edeebde7478d666b50954aba6b58bedbc635dcab725976aea6f26
2
69
2022-04-27 20:37:55
00331ec9fbe64545b63af768c6cb98c35f84a7e9d18772faa12566bc76b8375d
35
68
2022-04-27 20:25:23
0214e1c319d7db7e6050b69c8c8af5aed18b150d87c157ac3e38ba4116c8623c
10
68
2022-04-27 20:24:35
011cb2d77ce7e4f439031b1661698c3264df20e786b6e96911e667da46e7db1e
5
69
2022-04-27 20:09:34
01d17d1876aa99ba274a0f546b66d31afd0e2178505f1778be6a65bd72f81757
12
68
2022-04-27 20:06:51
004f55137fd973ab45070440c51eba4eb82aa39551e0d45e039f0d9e41b12730
3
68
2022-04-27 19:27:07
020394b6e80f921c85cac45c767d5000bcf458ccd309969738f9604ced6e6dbc
6
66
2022-04-26 21:49:07
03f6004764c92dc35c9f45a8cee5788eb27df2d6b9130c12623a0039064cbfd4
6
67
2022-04-26 21:14:30
02bc30671957a580f2f258438e336c74ebbc577ea7b553380763fa70b3805240
6
69
2022-04-26 21:13:25
03a56c6ba1a3a426eeefeb744487dc65a84ee56e4a821526aace3a4cb33de789
15
66
2022-04-26 02:45:29
03be1df9a99e25732ea4de679ce92ddc9df2da794bbe6f3e817ed17b4274cd89
8
68
2022-04-22 08:48:14
7ceac432f728ed69f0ca264db21a14b39c765e48ca8b26e59c49947a53e4db98
12
67
2022-04-22 08:43:47
57df101181a66472a6aad94d4145163d76981674b7c2c92f18a29c80363cbe97
8
69
2022-04-22 05:27:59
81fd9145e6ef177965e06c9a76f396bf0496544b66d2b6170feaa5411a0bc2fb
48
69
2022-04-19 07:23:36
5de51a3cef01008ec4430b771e6611e77cba213750e26ef4e631100fe3e86b7c
8
69
2022-04-18 17:24:53
94fdb0241cc4010287149e38e43499ff058e6635ad351be3d58c8e0aee562e90
4
68
2022-04-18 07:04:34
b144fd3953d96e19705155c9f3bd7f03a2d9e46a8d336442856f6eb6bb7c7c3b
7
68
2022-04-18 07:04:34
c2ec3d4545b13fdc4fc61f8f6de446def06638b90e88185cf814210553423b88
8
69
2022-04-18 07:02:22
24c32055200b4aebab5222d7714e3be7626ecbdd9b1af4802ff5e8057a43f3e5
9
69
2022-04-18 07:02:22
73c7fe31465b8a48f837b57ef82f82e97a408e590ef123fbdff48df63177da9f
10
68
2022-04-18 06:59:15
59f5f56687cdfbdbd648dad4ec0bb3a88b62510cc8b536d50bda025d797a3d21
7
69
2022-04-18 06:56:00
0d72acd19a725a1de0018e4bb5cb5ba34adde59f99d0b02708d285412cdb6845
10
69
2022-04-18 06:52:07
4e296b622c0de0d98c14ff49ffb5a4176e5ebcfdd44f9e50882879999d0a1c76
10
69
2022-04-18 06:48:24
9c0e1ecdcea3512355dbeebbab56c763bb44128f30b4f388c51ad2caf6e34eab
6
69
2022-04-16 18:10:59
e3fa90a61e52d1330df474b9dbeb265464dbfa548e5697ee6883c2433537ffde
3
69
2022-04-15 09:49:38
43bf6d8c228c89d30147d3f1fb31324f03b080a628b15b5890c752574c04a980
4
70
2022-04-14 23:39:09
0478d446387c2f82a0aaad97ca2fcc350734b76047ecd1ee55b91c35bac3c363
14
69
2022-04-14 23:31:17
07a7b8955a9fa073f4886668430149383990f4c75c1acc31ee2aeece936b4ce6
7
69
2022-04-14 23:29:52
061cceb30f7d154e9f4ebb2bb93f587decf7157d2a5ad541f739b0a3d3c0b000
13
69
2022-04-14 23:28:19
06d0b4b4a7d8c311d0e8abda31aa2344668294e357a470d8cf604ac6745b069b
11
62
2022-04-14 08:05:39
0102c5cbc7ef5708f4abd2900717576711f2a31613f8dab1fbbbda810c139fc4
5
67
2022-04-14 04:32:17
6a7d1b93bd99561e55def4493ab5b99acff72bd7898856dce3bc0e255c8f1db3
3
68
2022-04-10 14:23:06
148ce2275c4621054bf764c16d8d475bc9f4982e36a867523b70e72e9c1c4f69
7
68
2022-04-10 14:23:06
46dcbc159bc2914d4fb3c0dce03e2cd07284d655a594d487e3dd2e203d7cab7f
5
67
2022-04-10 14:23:06
26856f5d1d0f0adf7102785509b797ff78566cdd3aeeed873b5483915086e1d3
7
68
2022-04-10 14:23:06
25ee85dcb320884bc3867d1754b77a065fb5c50ef0a6e792164297b792d8a872
4
68
2022-04-10 14:23:06
88071f96ca16df8f10951e03b774658959687f3eabca0d9acdc0dc0f6ace0a17
6
68
2022-04-09 12:01:42
3c051cecc2dfadcaa1de76d77c2196b6d4b203f2c51157b29afff2212d82a7f2
0
69
2022-04-05 21:17:55
03d9ec4ee0b493e789348e4cdcfafa2630d625e338975e69fecbcbec2fefb86e
13
68
2022-04-05 01:25:12
0111d418e86bce76ab89612cf8d1a61db7fa389e984032c1e380a222700e3787
17
69
2022-04-05 01:23:22
019ac1ee02eac42726e27a6ab5b7f608879bca432f5c4910d61f2c2b66c510e5
8
68
2022-04-05 01:21:44
018033e6804107470a03503bde88a14b3b9bc7cb16034b58c89645e679825369
7
69
2022-04-05 01:15:37
039d945092f14db27f3838cc2f38545c4b7f40c088623c0d2d6b3b72803c292d
7
67
2022-04-03 19:45:23
9ede215da08ae7a086f6bfa48878e1bd15ad902fc8736507c140b2fcbbec3fb5
8
69
2022-04-03 15:42:02
0d51790cce4d4c520ec6760d1bec1c2884557e7cf3d63e22e40f722ccf4f24cb
3
68
2022-04-01 21:10:24
0216877a6fe6ddcb659db492e268fe8afe26010841d88d68c79e4db4bac7705a
9
68
2022-04-01 21:09:53
01911f3a5d1dbe324611a56520ca8b741b2ef66259fec301e5c8eb4b04faf50e
13
69
2022-04-01 21:09:47
0115cedd47931c8010111a735bd0a4551223cf2322f9c8a73ba6d62dea080664
15
68
2022-04-01 21:09:22
0131702054849998d5ec9eead5131bd2ef6458e009dab711aeb7a59f15e084b1
11
70
2022-04-01 21:09:19
02e5667275f3366f20559e1a4c98aa7087cd4e9fffaa2be97e7d1690eb841f77
19
70
2022-04-01 21:09:17
03f290a60e40a37a995e51c5bc484b1ee8828312427e77650d46ac8988951cc8
24
68
2022-04-01 21:07:59
01a84a77fd06a9be788177a5dfb3cf7eda96193ce16f9ec010f931e4922c8b52
7
69
2022-04-01 21:07:16
013bcd7cf8e934ecc2d5c5247b1bee160099549eb7da32dce0763f5c70fb188d
6
67
2022-03-28 16:17:30
6afb8edc33bc18d6d086cf2d3d7272f13c10610308c7cf762632ee05a8ebdff2
3
69
2022-03-27 00:39:42
14aff64d0da7bb3ab05c0680336874bf6ef8cd20c9fe0818cd37708f4b29c9a0
4
69
2022-03-27 00:16:42
bd7626a7d6ed8fc88d547c48dc7e90b099f79581b07953a1f04b06e3c6e5caf5
4
69
2022-03-27 00:09:54
fc173881ff5e5181fd40cbed7909cf8827e15d323a1ca60ac6ccc30618a382cf
12
69
2022-03-27 00:04:26
48df765d40a46c83d6d803dc9641ebf2ed6db0b4bf04d64f8f709143de600943
5
69
2022-03-26 22:38:45
2e8ca6b258333faaad256274be0183b656b85acc6c9a2024f43d5ee7e09866b8
4
69
2022-03-26 22:37:40
f716f73fdab962760891f218f36d4c307fc48bbb4c5c8a0bd57a7089f805fb2d
6
67
2022-03-26 22:12:31
d450e44ef103d5e5e2c2f02ad89e7371e05f4e46bab2c3848247ef5cdf0d62b8
12
66
2022-03-26 21:22:40
22155f2f662ca00eacda96a558a93080797eb7b82ebdf80db3967083613187a7
11
69
2022-03-26 20:09:33
810a9401ce8af914c89fd9aafc99472d66eef4e11095fc59b49f330b94672ad1
13
57
2022-03-26 15:30:58
1a8e5bd6baa16530cb6fb1dd20c5c03d161cd2155362c70040d09d22e294b75b
5
68
2022-03-26 14:42:20
7e0ffbfdade43037d96d9ac6dc4573aed55148080d68b2d3c1a05738c764a749
7
67
2022-03-26 12:20:35
50543902760c6af5edc89f86c3d9df6d974e32a48baa4697433143637a553424
6
69
2022-03-26 12:08:12
239e6316c10cebeeab05a542c3fc888d11242705c1885c4bc922b5d9c328159c
4
69
2022-03-26 12:05:45
c8897b771265ce735330a9e31736bacafa487c44146c4585a6f22485937ac5e7
13
69
2022-03-26 11:50:21
ea2af324b2adde3591b5e60c8670166233cf2d5601cfbd742653a6f57555653b
13
69
2022-03-26 11:22:46
50ddb503b8cdf2658d0b19ae1e2ff78e65279378872820db187701be3942c3c5
6
68
2022-03-26 10:28:11
d66c12917c22672a8937e0ebbe65dc83b9b6b1c6a7d3cbc3ba0b2ac8bc747449
10
69
2022-03-26 10:13:21
18f6ec4a00dfbef3624a870a525b8901e4e010dafc9f0c8767a413c2a15f252c
4
68
2022-03-26 10:08:04
f33d956a1ee78402f844e54fdc8bf7f9894077940c5e3412b1d8f26ebce2403e
4
69
2022-03-26 08:43:11
ccc0c7f6a9d11f7bec488b3f076f2658f70cf2ea980c320770d5b37de6b3083f
7
66
2022-03-26 07:51:56
3244f42528abcdc4a8624c34de8ebe1dd083aef9196bc90299d23a74d4c7372d
7
69
2022-03-26 07:21:09
0006a78e61f96097efa141214db8e41d03f175d5c982bfde03d6769c64625e8b
10
69
2022-03-26 05:53:40
cbfadea3dec0b4d658925aa9d305e8403c9e380dbc714572ad1756c69446f491
7
69
2022-03-26 05:52:38
65d2f963de867ab2017a3de9df488ad94d9a16b8b1c2e398ea4f9c6dce564eef
12
69
2022-03-26 04:39:22
0f24f7817b67ff3bf37b12a805c86ca04b80647f19f1645e86672fcbbe4df47e
8
69
2022-03-25 21:43:40
b36116d56d2df475047cd45af5378cb1e6c4f05e2ae65847d44538a1e5e39b0e
7
69
2022-03-25 19:47:02
73981cd98d9cfdd94f77ffdfd7be4b52b85a24c97a40827f9aeb7641ad15e6ac
8
69
2022-03-25 18:57:31
32cc99579f6a177a2d47a2bcf77c2ce64a2fa978cce538ca08e29fc3a7690ef7
13
69
2022-03-25 18:56:07
474fae0685563ecef061e315c97cd55105d8d19ff3fedb8a8eecf063cc305f33
5
69
2022-03-25 18:56:07
6a49805d2adb3f670fa40a91af999f9beb0e929cd6066ccc94b0c1acd444f565
5
69
2022-03-25 18:07:21
ab06f68d736cfee835e7c4b961482a30e42d470462be8b443e8510932b20f081
5
68
2022-03-25 15:47:25
2ab2f99f7b5fc09c44459daae19fc503b4775a8bbba0add61c496fc8796179f6
8
69
2022-03-25 15:30:23
3e906500ec0666af4f42f974df4251d04042379393b1c725500021ac0f2da179
11
65
2022-03-25 13:40:39
2ba7b52e3adc9ce6b3122d09bc9a71df162197685dc50a3ee5a4389b95afd2f1
3
67
2022-03-25 11:24:24
34f6f9d88b75b6f630729c663b2bc57ae4716f73115b69c831855c489686af9e
3
68
2022-03-25 10:28:17
f6de7310dca83c1d7feb05922ba23697ca0b6515093069a220337dd2902effc6
6
65
2022-03-25 07:36:25
cca833cc6f34a9c9cd17203d824e75ac1faecf0220664272c79073846cac8847
9
65
2022-03-25 06:18:50
fb3b699fc882a243af4dbfcc6b9971588ab9187d3715184200dde408d180bb3d
4
68
2022-03-25 05:57:09
f1a4c12f8ef714330d2601cb951d5f1f00d568a260dfa177b724275587b1c705
6
68
2022-03-21 13:42:27
c2f6a5b0e3bf21d59a92c973ebf833859b35ad3696d773672e129c3c093c1eed
5
67
2022-03-18 06:16:50
3bb8d9ca6b46f0c66f8e0afa0e50146003418d2fe39642b39f83e2b1d9e71d6d
4
68
2022-03-16 14:26:54
8d482f6f85238867fe4f6664cabc99db6808f6f337a35a508a055dfd4085d0a9
3
67
2022-03-12 09:37:53
94bddb3b3d3b7c79caef2938c4930830add9792425f70cba10f4dbc57f67fceb
8
65
2022-03-08 08:36:55
fa9189812836535669900303b2164a54c2025f78849bf7fc737a1d49ce00b0ef
7
65
2022-03-08 08:36:55
c5e8f125d454228a7702e0ab902b81436ef84e2f61c7f21e7d86c97c94e7f5a2
7
68
2022-03-08 08:26:42
55e04842e8776a5f1fe20ef38fa0283b1ebd69f64d2b083e001851095daed6f4
5
68
2022-03-08 08:26:42
18be5b411ed54b5a2de334548321d60c7bf46a636fff1dcbd710da577ba25afa
6
68
2022-03-08 08:23:03
26383f60d7ac1899034b4a9e289be6a5884b20c923c399269b304fcfe9aad000
8
68
2022-03-08 08:23:03
fe2c66dceb595a23192ea7d6f85e8edc95e1f5331ab83d29fb2bc58a40cd6ceb
8
68
2022-03-08 08:23:03
3a710b2fc089e8a37b4826c55d73ccb4e81faafb3d6b2839fca3aec5955022ee
9
68
2022-03-08 08:23:00
ef49442e9e11945c4c60127380d348d653f69abb20bb4d3c681776158f3147fb
5
67
2022-03-08 08:21:54
3af4b120254088c7f7ce4ff0e7485a91969742e271c384b53bc7c9c170983b85
7
67
2022-03-08 08:20:39
1737ffca271dcd934fe2a26e6b48b40ca6bef5c1a6f8f7f8c2550017bfb4d32c
6
68
2022-03-08 08:06:19
eaae695f219d0cd4789332ac0c029a0471644166c056d356fe97a1002288236c
8
68
2022-03-08 08:06:19
aa6e9ec54d013b552a54e22824b6f18cf047bbb0f71387cec4f199c0be1dd95a
5
68
2022-03-08 08:06:19
7aeba7b3bcacb023dacfc9374b01b655cf6289da8db691f83aa6dc4ab23592d9
9
68
2022-03-08 08:05:13
50212bef8eb94ada2c247f51e9e5df0a913437006e380e5b4ebe4a64bc9325cb
6
68
2022-03-08 08:05:10
d28b5efa7f5d42695f82c9d08a62e551bced20cb6ea2617ce1ede2d19a6da016
5
70
2022-03-01 15:10:10
3d4ea1748fdfd5d826da979178037456b26c3274d49f1bf8b1f03af97fc014c6
6

Rule Matches per Month (last 24 months)