SUSP_JDNIExploit_Indicators_Dec21

Rule Info

Author
Florian Roth
Minimum Yara
2.2.0
Name
SUSP_JDNIExploit_Indicators_Dec21
Date
2021-12-10
Description
Detects indicators of JDNI usage in log files and other payloads
Tags
['DEMO', 'SUSP']
Score
70
Modified
2021-12-12
Av Ratio
6.9
Required Modules
[]
Rule Hash
e057a67136f248469749fe14f3731776

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
17
Suspicious (< 10 engines)
100
Clean (0 engines)
35

Rule Matches

Hash
Positives
Total
Timestamp
VT
7d26c10c14d10cc8831b98c842c08ca19a50f6224005c9ce42824ea32166e639
6
61
2022-11-30 03:31:30
8d56caa364cce1d8a23f7c560f9f9887b8f0e6075deabcc5e64938275ef5aec9
1
61
2022-11-29 11:45:59
ffb78d475813365c010b1d5857aa8c3bfc437934ecf78af0679c9726c00c6079
6
58
2022-11-29 04:09:47
a21caa0be83963beea346a2a191fcc8718f4a0c49e5070d8bcad2faa39d9d907
3
61
2022-11-28 00:07:08
c585f22ca8feadd2c9565e724d548f1bf5fcf0c659087087ce58008d31fa5b54
1
61
2022-11-27 19:29:22
57e6d3fb22f76323d7e4889cd0da24b6b54a2bfd8a820e9418b13f3d1c3812c9
1
61
2022-11-24 15:43:14
7a76dc835ad8aad245b7701b04783c406c8f9e513ec63700af12195217d90c76
1
61
2022-11-24 11:57:04
1b1a1b532923cf69c197f16e08a2c86e9aa56ac430b1f79c75debc49bfbe22e6
1
61
2022-11-24 09:37:29
98fdfcb1cf0a69521c4127bd04623fea0e17151e26dacff574e4402a7e689953
1
61
2022-11-24 08:08:23
cf9a5bde0eafbd083b48ca6f907a3d313b61431c70e382d742759abb3edd7195
1
60
2022-11-23 08:12:23
0317241e4aaa87c80bdab57f32a2fafa7f46b730e6c7a38cd031d8a9193d7098
1
61
2022-11-22 10:08:08
333ef80ba19815c3f427dd5e9d8dc98132e9e49e3cc39bab8727a67e9bae3a5f
1
61
2022-11-22 03:12:15
dc42a0a1ceb9b66f7e659e328b2b14d36d47bda8ccbd90a8c70bd02a0ce6620d
6
61
2022-11-21 05:10:22
80c28e9539b58ce9ac38adf7e1f1824e60d0784f03946b21a5c593223500400e
1
61
2022-11-20 04:14:30
b665ce90eae06b8d1bc6513a9441db6f5b7e9825d3462a8f692c019f035d6131
1
61
2022-11-19 20:29:50
9b19ec862725a2e478863c41e4c033ca4c04596a324f25b0985d2bfb5fb5066c
1
61
2022-11-18 19:49:11
948b90a5c89956c6fe2ed36e59af12575d185a4af70841c6546d7ba28bb4f56f
1
60
2022-11-18 03:16:14
eeaf85b35135d124214fa20ee6838f95e582180fd356e3bb4cf0548e516e3582
6
61
2022-11-17 05:00:36
4e9ce6d0042e86688c826324e6d92f2d3f101159de9741a2f4e68d45daa3a0eb
1
61
2022-11-16 09:07:15
9ed4fd64ee3738b97758ffbf3147e22a8edee8c722e44667b1882841fdb5cde9
1
61
2022-11-15 14:56:53
004251aae37b06b2ade7db976275ce475af10a9a32524365b1dca16738ab9d7a
1
61
2022-11-15 11:37:32
fe9bddc6e3bf4903bfdd1bbec08e2a9be565974b431c9020fdfe02d47833d686
1
60
2022-11-14 16:32:51
d1ef6cd040240a868c80d77ee0429df8bd0bf28b703edf40b64c63970bcbb736
1
61
2022-11-14 14:07:37
bef793050b6aa3dbfebc5d6033320d51c23f4bb64336a5bf4e6b9ba618aa5445
1
61
2022-11-14 14:07:37
a3d38be05fda7cbb1a0166514bea9dbd8d9ceea6b01d2c78b8a2c3ae7fce1b3e
1
61
2022-11-14 14:07:36
ee98da38fa1ebc7e429771d06aa276223c6b59b236de97d348d66e49826b0dae
1
61
2022-11-14 13:55:47
6a911cff59a0921ada0e4e8310332bf22b6a3c8df02091521c5300558f01cad3
1
61
2022-11-14 13:54:44
88cedb7c3ae783014d82c45996ebc738b6c79d0456340b30b97f1a56efed44b6
6
60
2022-11-14 04:12:09
51c2141bb46c09a9346dbe7f3b03a2c3ff534902d0ef8243b109146c8e765199
3
61
2022-11-14 03:11:34
ead5c6b88694219520e90313e8043080375db8c6899f8cd1c92ad6eb7a71dd72
6
56
2022-11-14 01:55:19
128dd158e52cb117d0cd640d6adf1bf6e179a93e4be85ece50395e71c277be49
6
58
2022-11-14 01:55:13
ddeccbdbb44c22de57feb7740f7e78e57679857170143e3ad7c7214db7ff356b
1
61
2022-11-13 21:14:43
b7fcbe2e0b4d86375e58a4b0ccaa58faec3958bb263a0bd1947a7070dd9691a0
6
61
2022-11-13 03:08:57
2d0fa121692fc9f46afe2c039094f3429a9a19f773dc9e7bf45cd6896fd16749
6
61
2022-11-12 06:08:20
0dfe29c778064493a75955ef55575780fe958c9c49d857b7b1adaa3d7ce1eb47
6
61
2022-11-12 05:09:31
641836ac81c013201de0a3703af878e964f6f9bd07d9a29148232e83a7ac850a
6
61
2022-11-12 05:09:27
2523d318e7888c3cdf285cfb17113ed6e0924d2e33cb1bae13b3458489176f76
6
61
2022-11-12 03:09:01
db7367e8f1ef0e2ffac734bdf35e4dc1ebdaa7fa31126a536809d01ee060cf59
6
61
2022-11-12 01:57:06
6690cfa64a6045ead8c450e92eb5fd7b7b7158844ab0b3af4038b1afe605df71
6
61
2022-11-11 09:12:05
102178785992e0e197db540ce4b0a8272dbf562d660b5a31e3a55c356de00899
2
60
2022-11-09 04:17:02
f5394b68e965b09576eee2a7fd19f688b11aa31b8733ed028fc7b40282210800
2
59
2022-11-09 03:10:57
da19c710e7a131d8d3114033df0e8491ab9d40f9ccbb8a1cbd4bfd4a045a9cc8
3
61
2022-11-09 02:14:03
ba3487631691ad645923837e9b6fda5f33b027bfcff73cb16fd19bbedc535c1d
8
61
2022-11-07 03:12:54
35822501ec0ec93b71961c761d39b9cedbce657a055286f0e4745b0f2293bb0a
6
60
2022-11-06 01:49:12
b9a0a88a44d556088d0d96e2ee0d02616867f1f9f4b47695d69e0adc8d7ec97b
6
61
2022-11-05 06:10:29
32232cededd70ccdf1b04b29989a5ba5cc4349c4dcf957639945d54708afd3a3
6
61
2022-11-05 06:06:54
b539e00ffe9cfbd00018ff9a415afc2f72f7ee5b7b0ddad856a2b226cfe88dd2
3
61
2022-11-05 04:20:53
077c9802b046fcb4b66d4b40c5cff64cfef42196c750f75372d6cddf825276d3
6
61
2022-11-05 04:19:38
b20b3516f135a8ab51f2ffc95673f0f7fe361670d669e1c7a9fb3b7e66533a4c
6
61
2022-11-05 04:19:35
7ce9c3468ebf490d9cef1e7e7fb615dc1d1c86c5baa6a0988a5422230536c372
6
61
2022-11-05 04:19:35
0d8a941291d488f3f8e74882ca5051aca237c7dc5ce3f2c8df29c8b60f500a4c
6
61
2022-11-05 04:19:09
2d4224447213b56a6bea5524e7228674e29836b9ca8ae305197f649e0a00ec3e
3
59
2022-11-05 02:08:59
22154bb5dc8fda8a1e9f6375f3ef939f67da28e506dcaf1fddd833a8ccec3999
3
61
2022-11-05 01:02:49
efffc4af84588ea014951a3467791ca239ac115a803d43f9a76291aab3b372bf
6
61
2022-11-04 16:22:00
86c5ae16f913f0f9e91c0347f736157c9afde6e626203a71fe1486c4b39c8cca
2
60
2022-11-04 01:49:54
14621fb712439e3e20af028daa799a3fdd60ec83758647c79ce6d6705db8797d
6
61
2022-11-04 01:48:28
ff8e74bc651b29bd2dd3ca85750d5911433dc8e56707d19e770eb0342a44f9cb
1
61
2022-11-03 03:44:54
4ffe04f6a8b129ef01cb577f45f171d88dcc35fdf61c3e6aa5d84cabc4577cfc
5
61
2022-11-02 03:23:45
23c18cd076d9b7a40b47754d77c84cbf4836e96e65d05696f3221eb1fc6bfadc
6
61
2022-11-01 00:59:57
9cc50d9954af8e736e6e3caa9a9407a1274625ae859fed333a4f2720408f282e
4
61
2022-10-29 02:44:47
9890859a90a5139d324cbce4e458d6e9ba29250a007960bb550c60edda966851
4
61
2022-10-27 04:16:04
c96003f0a9d168f0ac9c316ab9afccddac8af0efbfca61fc830412331dbcbeda
2
61
2022-10-25 15:19:10
ec13d4f8069872746e4eae55450d35eb46b65654963ec9b405715d17aeb4e1ef
1
60
2022-10-24 09:01:21
3d5b9088a4068e203246be89d2b751ca82cdc6fb450029f9e8ae6aceda3f962b
1
60
2022-10-24 08:58:09
a32becbe867b78311911651d4b4a984ee611276cbbff4789d69a751d5b0f7739
0
61
2022-10-19 21:44:21
d3d53d3554c5d46754bad73990a1626512a8a7ed5abeda313698926631ff82b3
1
61
2022-10-17 17:18:03
6d26f8139fc5852a0bc9b7a52f04580d813c49a0b26c2090b29aa0fff9cd599b
0
59
2022-10-03 12:53:42
8ea0c73ff2a3cea0154553d7ba4172fa3ca328fc6f66e1c166ec0d9148ec006d
1
60
2022-09-27 13:23:19
f1a01e3d8430e84e0021b90d68c9e2b2aaae58acedcf7088f57a954a976c6692
1
59
2022-09-19 03:16:02
840c3572dace69ef15ccccec2c857206877fa0a887dd4952fd4367a30daf36e5
1
59
2022-09-18 15:06:53
6f123ff3106f247e75c9560325fe99f8c0854beaa5ff365a86f408aa7455caa1
10
59
2022-08-26 20:30:29
be198fa8fc602e5c1c88f74adfa67df7ba009543f701928146cf117eae9ff225
1
59
2022-08-25 07:14:33
de6404b82d144619d1d18c0d14f85cffe50d2ef6945287325be731f896aaadc5
4
59
2022-08-24 03:08:02
397ab1d688093f8bb4867b68222bef9d1f9a17c10918b725f512aa8153bb200a
1
55
2022-06-13 19:09:14
a7268904a9ae3d0246234ea8318a9eb26b65e332d0da32798067f71faa808444
1
56
2022-06-11 12:14:45
88e1b0b16f6306fb1a7da1f5a059beca9ae8bcba3494775180be398c16dadec1
4
56
2022-06-06 21:12:03
35b8d1371352cbf3569f33c62128f15b83880ad5ba4322dc937edcc824a2c1da
5
57
2022-05-26 07:06:30
45e4d666445e600305aabceb2e341d592bd931e20fe0d9bf661d7856ef02f544
3
57
2022-05-26 06:12:41
d3713650d9441783e737d81a4dfdc55f03354b35a4988cd419ee563cbd9e57a4
0
58
2022-05-17 11:31:16
8925dfb0fda52b019a94c54d8b2a219d1d054fbcc924be81a4f1f3018f08d7dd
1
49
2022-05-16 10:16:58
b3163f0a1fbbb12567ce2ad58240c0ed7d3aee2ebadfa86e65fd8559f959a09c
1
58
2022-04-12 20:29:45
e1973fe8d87fe89ea1980779a3d7aa5a40e3bb8b1a65d3e59b9aebc5b4d40cfc
1
58
2022-04-12 13:15:51
2ea850eaad9bc2f0fe597ce8bb16f176bd32c23e8bf52d786357f46ff301c25c
0
57
2022-04-09 14:52:41
a045dab146973316619abb05d9e9e909019092a72010cf059aab3f2258bea75a
0
57
2022-04-08 13:31:29
3252c162b5c9a6f7e0224ac2253540708dcf493b8bd5568b45131437761f94ff
0
56
2022-04-08 07:35:22
17936e70307972295bb8e9609bfc9d86ee83fc20e4e81bf19baf5a0ea85a292f
1
57
2022-03-30 10:07:39
61edadf87012c548afe8ed384d70797f7738443508eac740d5812be65169bd86
1
53
2022-03-29 11:24:25
c9478015f13863e57635fac5bf559cae3332e7024cfcc45d031eaad56c7b62a3
0
57
2022-03-28 18:16:02
5b2c04c23fcf0b0a0e8ac9077ba2452d1594e862abf73173a8be95fc54132acf
0
56
2022-03-23 09:44:36
254fb732e53d28b4177c247f7548132d6983ab95b9192ec6ef2084e2543db0a1
1
56
2022-03-23 09:38:10
12f64b3d8c7e0dbc43c1bbc7a7704149609aa50086690bf9553f8674c560b36d
3
53
2022-03-16 02:40:18
5f4bff55442e82be1a69b501738ae436e5c37a6fb7a15d6de4ba7b52aa4f65c8
2
59
2022-03-02 01:54:26
042078257f6bcdec2025db609d2c43d309db3ae168cb13c2ea2d1cbf79081f2e
0
56
2022-02-19 20:13:23
d32078716f1fc1d30f0c598f302321e94fa3ca229333403d888cd17c22449812
25
63
2022-02-12 08:21:45
8593a076c6301570d3ed81f9b2b79021a3693fe5c03d5aaf6fe0124bc6fb0ec8
0
59
2022-02-08 06:34:27
69a3b5f869ba4e7b54e5341c64af044f38e10b68f66bd4472dee48cf2abc1433
0
56
2022-01-28 18:20:29
da3e9e5f35f966c5cc3fef913384493ad514730055a0f4b5ac7dc45177dccaea
1
57
2022-01-22 21:50:38
1b7d6def1dd599f61b7b0d225bafb911ca850805628e418dfd0c5193016911a7
4
55
2022-01-21 16:16:29
44b1816c5bbdea0aba8c62c87abb31427d40e4ecb2980f5f31c71a3efb192b98
0
57
2022-01-21 12:37:56
657597acb38eafb754a012dc2dbbdc32259949d187fd8ef556dd87dd7be90cf8
1
57
2022-01-20 00:43:54
93678ac9ce8ca1637e2bac6009702b8b5c278f2cb75f02bc0a41bd1f5addcf3e
0
55
2022-01-14 12:01:06
ecd167f2191f4e2149359d3bf5f90b86c07aca5b89310409e654f47d15c47c08
11
56
2022-01-14 11:11:36
03d02a7cb2517d81893c67a597b71a41f3727cdf0d4845cb7386ed8bbd504ddf
2
55
2022-01-12 12:57:50
0a48e6b4d12ef8ae41980d7de8e4b907d2f951befcc0e7220831fb2da326ff2e
1
55
2022-01-12 12:40:01
cb536c90a751e66d0ad62823089a9254d2dcc9b02ee08cd804586e8c1ba39bf5
0
57
2022-01-10 11:46:57
ffdde170d837231077e6288af31f4c3155cd63d4e3c50d92fe67af7a79a9681e
11
58
2021-12-25 16:05:04
32f2e865f78a86d9240a2b92b0bba2a948935345d29c7211ab71fdc5769553c0
1
58
2021-12-25 10:56:28
ac46725d732f453d039dba13f410be7016750621551d4e57a2d5b769aebe3191
0
56
2021-12-24 13:11:12
2dd5d4ad8df5b43a035bb9627bb310669b02f019d13a5e7d82011f76cf12eb49
0
39
2021-12-23 03:20:02
a2f8c3878f0af9cfc0e2278aebd71df4a6019cdf5692b7cf7f9b89c4d9160276
9
57
2021-12-23 03:16:32
bfe0002bccbf5ed26a54782ce02c69032b4ed0a13a7c51094cef898262005c6c
0
51
2021-12-21 12:06:01
d50fbe7077b1d3f507fea8defe7563791ca37efd6e802d632169a049a90e8994
0
55
2021-12-21 03:17:39
094da9fb31b753ed07a99720ee6b251f0d0034ae633f81bb21613f0f9f944d70
2
56
2021-12-21 03:17:39
0bdfc81dab816e1dd2327ae7cef236fd445f41b35376ced8debd2d7fdff24aed
0
57
2021-12-21 00:40:35
e2583c5350a164be167b4928f99ae1bb8579bc49437ac27e928131c42f829820
0
57
2021-12-20 07:22:48
dca21162a4237b761ee3a4ae9be880b480f6646d0269a9bc36782d564afd912d
9
57
2021-12-19 07:34:26
e3a31461aed1ed1de1df536fb913274884bea7ea9a9ee2a7a0ce05f506e745d5
10
57
2021-12-19 07:33:19
17f785b1d881ff3c7151fae977bcbf2c71b868ff57abf2780d5e69f560fb7a7b
18
62
2021-12-18 08:53:25
2c76ad86ef6e62403d5a3e522ddd6b681139b4c9f1fb683ce0aeb44121c8ea45
14
56
2021-12-17 23:47:30
6245e1ac4150602a46b67420b44fae3c475a8392dc663f17c3711aa39aaba834
1
56
2021-12-17 11:14:46
602ce22d44a429d4fb5199b09502c39a2c5f84653d27fdac167d92408c5e5e8c
15
60
2021-12-17 10:58:53
3acc3088be26262923510cd87916a36c9ae4b28182cb5053c8702cd95f97ea54
26
60
2021-12-17 10:58:52
e969c878334bf0af177cd2be2c43377327164c6d085e1071d09ba6c8505f75f5
25
61
2021-12-17 10:58:52
01d53048f0316d6928ecf54b2ef576dc645b3b7b0d23aa7d60345ab06b3e0cea
17
55
2021-12-17 10:58:52
12de06b32dbb246bc033ce25738354d6336874c8969b480aac36fe5607d9bcd1
25
61
2021-12-17 10:57:49
9bbe681c3c4be5b3c371da145de98e94983da47688268415ae1791cb3a85cb96
24
61
2021-12-17 10:57:49
5bfbb3d4505918b3e1d95bf1e2123a21abf5ffdc35801823cacfb9d44fc84aa6
23
61
2021-12-17 04:03:44
105a12429011b7041862ae26ab6f79610e8144b13a70f1ecb22bfc0ac8641afe
25
61
2021-12-16 23:52:44
2da8510ac4fea01dab7a702de7d25a41147bba6624d2459ea5ce8367248b5e28
20
58
2021-12-16 23:12:24
5f0db9a4d16ae13ee931a52e8ef5e8461b2c1ac2b78226002036b16227122e74
21
62
2021-12-16 22:07:41
bf8d19b107c97c87848a76f58606d570e6b515f9f10dd77a4f83654afd02e70c
3
53
2021-12-16 17:22:49
61c6099cc4895a19dce1f4c49c2dc92a173adce0fa423741fcf6fed70fcc985d
0
57
2021-12-16 10:06:13
f32e675d011bff435f224203e226302ae0297c0bcaa30657b19e096d501944fd
0
58
2021-12-16 10:05:59
b66c55252cc5a047a65d3693078e1d75a1f87b665b846bc798771f58d4072040
8
57
2021-12-16 02:19:06
8f808f3f636c486197e9c4e3243091d3cb52d86cbe81a2888c08d5755e121cd2
0
57
2021-12-15 13:29:43
2594e824e6dc5be478c434f85573e492ec283c5a2eb78d9615044034517bc3cb
0
56
2021-12-15 11:56:37
65e1ed73651cc83d711b9832d7c162659bbf71a343038e094667983b29014243
0
57
2021-12-14 17:09:34
2780737e9937864f6b006c1f47ab390e76207111616ede87cc189777103e470d
1
56
2021-12-13 19:30:32
6b5b251a8ccc3892eb6838b4af44924aaabb99181e95f7e175472b788cac7404
0
56
2021-12-13 08:27:28
e1c46ec8b9f8c57d3d193379849d84fca73dcc4684bf1397ae129b6c8d811529
7
57
2021-12-13 07:26:07
a939b1db7a329a41dc80282f57a6f99d71a6086655ffdca25917a80a2f2bc9a2
0
56
2021-12-13 07:17:22
332b6dc17abf9ad6ef9860db7139dc1d481f8d4091ee001c94e79ec42ab9792c
1
56
2021-12-13 07:15:00
464dc763c817efdd80f93da98eaa45a3feb667d63902735301490461ee41c279
2
61
2021-12-12 22:49:17
dd2eff8ee8d8a5e5cfb5adf9f575ccb92d6faa570ee6e0241dfb33ebd2343ea2
0
56
2021-12-12 07:26:49
b5808176e1f4d67f1ac4599f137035944c399df92e0cb5fcebc34287c99d03bb
0
56
2021-12-12 07:25:48
c85db5d0eb26979a95cd653e28d6fab134f5ce03574c21b74791de75e5a67de8
0
56
2021-12-12 07:21:36
633b0b7efede0053e4b4ab0aee3a511d459c0eb2f78a3389cbe2aebc12cd38a5
0
57
2021-12-12 07:20:32
6ddb9de34b860ccd16143e71d9a6f24baafe78c36c885499a991e6143c7981e4
0
55
2021-12-12 07:17:17
ce06ed30774e245c4eead6b62e4a173c886a87b7d8b9fe7ba5d7c4b0b72fe08e
1
57
2021-12-12 07:02:25
4fa7b29c5546c65fa743a68a1d93b79dca6ee1ee1d4ecdb90ff9bd13250716d9
0
56
2021-12-12 06:59:10
171cd4bb38157ca2a9c7e6457a1fecf4bc72196ad53b3c1299b50e1a1a5d7daa
0
56
2021-12-12 02:30:55
0f6eaec34516e9645410d704dd6accaa381dd23ac2aba3801e208f59d296923a
0
54
2021-12-11 18:51:56

Rule Matches per Month (last 24 months)