SUSP_JS_Info_Gathering_Sep26

Rule Info

Name
SUSP_JS_Info_Gathering_Sep26
Author
Marius Benthin
Description
Detects JavaScript files collecting host information such as OS platform, architecture, release, uptime, CPUs, home directory and Node.js version, which is typical for system reconnaissance by RATs
Score
60
Date
2026-09-28
Modified
2026-10-01
Minimum Yara
3.5.0
Rule Hash
06b920ef24960734ed2c07a1505456aa
Tags
['T1059_007', 'SUSP']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
7
Suspicious (< 10 engines)
7
Clean (0 engines)
86

Rule Matches

Timestamp
Positives
Total
Hash
VT
2026-11-11 05:12:39
0
62
ed6374184312b2ee57d5f319f22461da11646fe89c1aa80882956a329fd283b9
2026-11-11 05:11:09
0
62
2167e7ba8051de24f8e0f877a32cc08e25d5c42b7370bca7bfba375c1030369a
2026-11-11 05:04:40
0
62
01162fb86d5c629c41d617e87a6e3dff03443ecfa3f8cb7e7e67bf9f5877af18
2026-11-11 05:02:49
0
62
4d497d5476610ff5a0698b911ced1e2ddca0526979c48922aedf150afdfb803a
2026-11-09 13:25:59
0
50
6eecd59b263325d9668499ff2b73a551b3bfb54b5163cc08f8f12430cbc4e97b
2026-11-07 00:06:19
0
63
58511b3f6e66f8ef182e8b5e0bded33ae62007f5a573460f8e4fdcacf73bc5ad
2026-11-06 23:56:39
0
61
361eb4253db19e9c42289bf13a09c9a414a03c7c68f8c8480efab24852182977
2026-11-06 00:01:11
0
63
400b8bf9595b21aee6b12855e438c3d3bfb58ed11e459e28eef7198285c65dc7
2026-11-05 23:55:09
0
62
2ad588386b3d0025e9f7d0e8ea2a00a4c7d0fac4645a2b82bd3bb1b3724f08d9
2026-11-05 23:37:29
0
62
810cbf43002ceaf17d11fdc4e41eb72d866eb16bf7bd9e3537daa7def915d98f
2026-11-05 22:57:23
0
63
24a2149eaab21c90214e7adbccf5333594ddf5c66eb0cf3d6ffe3a34ba470716
2026-11-05 18:44:29
0
63
4d814c08aca89aa2555d6b90c2c3bfae43a00d2b17dae34458b78723c995003e
2026-11-05 17:06:31
0
63
14fcc958d2d5269c6398e199ab45173cc50fef22b7738a001766615720470860
2026-11-05 15:18:02
0
63
1fc5091fe673e4398ab8e18ca2d6be484369dd9d1ee8b4648f1661e643df92db
2026-11-05 15:09:39
0
63
594c0944d4c466c34f80a8c55aaf78dcb2c96f75f1f35f6dcbe14523aae098e5
2026-11-05 14:49:29
0
63
567b1dbf0067d15b3b606ef2ba118bf0583b8dfb5dd5d07d87135d429a2971a4
2026-11-05 14:49:29
0
63
310bf34d9d05e491b030df30d89439222f0a95217bd360d959440622c8494cdc
2026-11-05 14:42:29
0
62
1ca7932c2c16996f13cb7c148a673a0f2cbab1a282a6eef6b0b123a564c2c868
2026-11-05 13:47:49
0
63
9a7e6eee69a422097c9a31a1e21dc4c91c1ca7c3134722c1f15f8aec05ffd106
2026-11-05 13:23:50
0
63
1f389a62faeae616008e415fb34c61a29835c311460f748ca92fb8c5b68b902e
2026-11-05 13:19:20
0
62
b25ab8ed0c594ee5c2be7551c7ec793cacd7ddcb66d208b1592c5d6cfb4c398d
2026-11-05 12:45:30
0
63
8090e88aa4fe417fd5e39bbf0f1cff90be99a089b9828518f9db72cab0d80954
2026-11-04 01:57:40
0
62
48b82912adadf27c7f3fe8d8af15e1544f014346a8e16509c929fd5078c62a08
2026-11-03 23:44:39
0
63
7a044d19a857dd4674cbc025d892f97d1e46df0066ef90d8745c5ca4489ba42a
2026-11-03 13:34:09
0
62
f9fee311ddc55c022f7eff72fc1aa2556403937230f5e5779698e621b63549f1
2026-11-03 09:07:51
0
63
ee111a855f4199d1f39e907e2f82f996ccc3fc036462dff00ad567ffbfc9e99a
2026-11-03 08:08:39
0
62
63ee8e2f4909e55f03bee1264606afbf866dacbe40209a9ef8f0e6335b083aef
2026-11-03 02:17:30
0
63
d06659fb30de9abe1d6bba806e5a1c35ccd15b6d11aa1449e1e1d31908fd4779
2026-11-02 21:26:30
3
62
10bcbc1ee7ef14d6af4100401000ddb130fb4698aabc680096ef2af83a14b40f
2026-11-02 20:24:12
0
63
21a80ab4607bddf7c310de6a99649a98e96e15a50d032b0d06cd9389eb4f36ae
2026-11-02 19:33:30
0
62
ade4e21d533e69bf64b11a1d03789dc5fdf67ed43a8c4c7293bbb8ca2597862a
2026-11-02 19:33:10
0
63
c89dace285f37f08ca258104507a561264be8a7d42958c445456023f9de94c86
2026-11-02 19:05:51
0
63
7779358cc1e7597d6d701cc0c821b3f7dd7de32652e4ec69ebdc6c3dda800fb1
2026-11-02 19:02:43
0
63
84340283236a6db5d1322d8f4f77ae8d79e0555850a7c82666cd2320a1d396e1
2026-11-02 18:37:29
0
63
9f642b9e2c22622bb10cd0c4587277d6db3521e7b270e016a27b26d9370f2e26
2026-11-02 18:13:59
0
62
d64cbbe3ec922d1c8339b5672dde3791a0da85f2a51d27787745179b66c5c847
2026-11-02 17:56:39
0
62
f0c7d562880d67b0ef0a6e0d85d431fbe6b86dc99d12230b4b7c43bed3a429c4
2026-11-02 17:48:11
0
63
5d83efb83c02da4228518bd6473b49824bc84c040a9dc49b46740984b2502a35
2026-11-02 17:21:49
0
63
fd972b0b36792c488b3a0e2829e0a228eab4613fa5072b4dbaf835232dfd64e9
2026-11-02 06:37:57
0
62
378263875a792868f85629323131441de66835a4aeb7c8114168849d0095250d
2026-10-28 00:25:05
0
62
988b080c53987f0b857558953e0e294968159f970e0b5418e7c66f18704f90e5
2026-10-26 19:39:20
0
62
1e06f720f8bd3e901e72dd6824a62c7546b5f631a3c8098080f6372e16a67c92
2026-10-26 19:28:43
0
62
8ba46d5d2652fbf0272fb2dd9d83a76747e2514dda64aaa0ed6bf52c49b29b18
2026-10-26 17:49:26
0
62
6bfc394cb0a2b7e758b44c141d2701411f3ae9bcc7380c6d5e9e1b7400dbaef0
2026-10-26 17:33:08
0
62
cb9b7b693e8dee967c1b13559ac063f8d8d0b489a53b6513b73bd665e3daf293
2026-10-26 15:54:17
0
62
af7a7296834156e48cce4938d76424b9c0ffbaee7342fbbceec3c5eaeae5a883
2026-10-26 00:21:27
0
62
92ad01a8aaf43ed63cd6d14f0e689fac21756ab99dda15e147c33a91618b0f1c
2026-10-25 22:34:06
0
62
dd1a4376032063a6a44df7f788e8deabf22958b263c38de398c2d025e2c3e57f
2026-10-25 18:32:47
0
62
aac71cc6f2821895e28592d0bfdb7f66ecbb9d336280db54caa6f5ba2397150e
2026-10-25 18:17:06
0
62
ccf03345a875d96f6b233cbc30ff9edbffcf9caeb650fe53c4473ab71910eed0
2026-10-25 18:14:57
0
62
17678e4bbd36f4e99bfc93c13fe95719b4c1e7924dec4281fc4782c4bc12bfd2
2026-10-25 15:26:58
0
62
4860246ff43effdff94b40ac858e926dac0e6c44f5540d0e0bac1dbf2f658bc3
2026-10-25 04:54:06
0
62
0c0e5195dd1eb4227b9966240fa72b5629246a4af3a22beb677ebb75950c8242
2026-10-25 02:05:45
0
63
509370aee4070508c0fbd0eb16ddf9e8661f47c022a4d49f96a08c843602f191
2026-10-24 07:56:19
0
63
3c61a0bb835204dae61e3fbf0cfcf10ee05f03ec9e0602d3ec90540dff7c9495
2026-10-24 06:19:27
0
63
20e481b6ce78de989abc8334ec65a2e1da1f0735dbbd93e1af2cf7fc9a2071cc
2026-10-24 01:03:29
0
63
bb5f28407ce586da8ff9364ee4b505eecca946c8e793777d4dd7548e49ea3403
2026-10-23 06:32:07
0
63
0b3eee6a0b002539288f8840ce2d61b33fa80775ce42453fdb6c632a379bb321
2026-10-23 05:21:56
0
62
d522ded6b3be62eb26b5d9fa6f8061f4e94282f5a94f314bb26234b5eecc05b1
2026-10-22 22:34:45
0
62
b0ac442d54281dda249afd6bb99eacae97c57a4ec485fbaca5441a0d42c5a547
2026-10-22 10:57:27
0
63
f8fc65455862afefdf8a3e0b0f53709ee667e636b0e67e77af03e6f9335b713e
2026-10-22 10:51:37
0
63
a50d9d2ecd53a96b349d8044ba0691093196ae0d8ca79b54cf77b070f5c4bf73
2026-10-22 10:26:30
0
63
4d4803737ee3a38420ae78271bb2c2e4eaa5bbd6a73a46c12948794c0e78fb71
2026-10-22 04:53:36
0
63
67d8e90727cf8088cf3f9351b36d0d526c886c8b60f1470f1f9b3d8820d70915
2026-10-22 00:26:59
0
62
e0a61bbbffd67a4b714b55fb5dbc1d1d00b66286d1e0a16dd629f4e376e89695
2026-10-22 00:21:38
0
62
b3516a22289fbca201f5d0a36a60e867e8bbaea56a8afc70d90131ef4cd51ae7
2026-10-21 23:04:07
0
62
fbe9bd0f9df5cda4d282fa038ae61494f5bd8454e9964d680d95b60f58d58016
2026-10-21 07:11:55
0
61
ba4b12023b54ed7b314bdd7aa170e61c02bfe7a40d14e3123a1aab6d86fd6197
2026-10-21 04:21:57
0
64
4fd90d785ce405a74924ac06523375799e76fabf97bfe9c602ac158492e44860
2026-10-21 04:02:26
0
63
701dd5bd2b405dc6ca90a0c1582d0f14494e2faa5d965f3fab82e2861fcbd719
2026-10-20 15:16:27
0
62
eb2a7edbb0b5089c8c44c9f7055106ece33779d810a764405b6e831bcea222cf
2026-10-20 08:51:47
0
62
6a072dce1d453ec49452d583bf95fa9471530505229b626f4a6492b47a99873f
2026-10-20 08:50:47
0
62
f08201e387c628f9458d5fc80baf19289b75a5affe1bd93a101c6acd5b3b294d
2026-10-20 07:17:27
0
63
674654206d21493d1bd11b044bab1e415b69c359d3e3a3fdfeee4d65f4bf04ff
2026-10-20 06:50:16
0
62
8bdda6b8de77739de70178eccb73c365cec278d3bc88ac3b22124f1614699296
2026-10-20 06:45:28
0
63
a711abcf9f3251c7d9b2fd794a131471704cc333e9444b2a1062ed904042d8e2
2026-10-20 06:31:17
0
63
77cd28f6243ed68b984c8e943556f0828387fd0dba1f73897b16e419875736d3
2026-10-20 06:03:16
0
63
90e1906e8589e8c2cff8f8c89fc79202d3907af6bf4d0841ceb71ca27f9cfa36
2026-10-20 06:01:25
0
63
e01a0ee9dc2445459f98c72489a8b6fe40c98010e12f9bdf19f77f80d9ead584
2026-10-20 05:51:49
0
63
1be9589c5a35ffb578bf0e81d156fc2573d6ccb700f7dce9a7cedd4b0b558881
2026-10-20 05:22:56
0
63
94aac0e186e252e1812b6543eb9cc74b4f8666bf6ba81450ec4778bec86f7b2d
2026-10-20 04:56:08
0
63
59d484ec678601c1aa93668a678c66d4ba03de09a1ca92149ea5f37693b9751e
2026-10-20 04:29:16
0
63
a07b15cecf93e0377bcb1b8c7f27b058e862d9de6c751d8ce91dc5141fd7187e
2026-10-20 04:12:46
0
63
3e8e79d3d53f99760a11015573ce62348a3332a26e4428792c281066fc36d144
2026-10-20 02:15:57
26
62
14d50fa1fc74862c45160cd555894267b9ae52d2d4f980c1c9a45066c083f2c6
2026-10-20 01:54:17
24
62
f7dbc97fe1b04d8c7d85c8bca832165cc3581cca19db994e01401c424de68c94
2026-10-18 21:46:45
0
63
dc4258a7344e77f95807424687d3569d64816c2704cc3143f986f86dbb3a639b
2026-10-18 14:43:45
0
63
4b1d6943e63ab17845aa99b3cf8f9d52e1d39a1338ef8cdfba4b7d0e02d4f005
2026-10-17 00:08:47
15
63
7644cd9132f358ee5a7f68066e464f9c2bd05e583e8e50e85f77ebb7aae2c0b0
2026-10-17 00:08:17
21
63
a3c28435295fed4babdeefedcefdd0ed037ff24ed3ff363a49d080c2768d07f2
2026-10-16 05:46:37
25
55
0e7802eeaca406ead3740d2eeacbb786b75e026212ec0c65e0f2f89561940d2b
2026-10-15 03:00:17
19
54
10f41901a3e5da8a9d1f64d6dd3ac504afbb4b1e43eae4635fea189c8a7d1727
2026-10-14 14:04:38
4
63
3a9089e9db3650dd6d1584fae709022002dc34854b961abfb014a90f0a7c6a50
2026-10-14 03:39:36
0
62
b2926c524f8113facaddb2831eca5e9475c01d4c5ed50772f254bf0ed6fd76d5
2026-10-10 22:47:45
1
62
c7c478ad9ef12f6b908878fb50821244e907c4dc8e8f2ce4e82deb3ff6c1048c
2026-10-10 21:40:26
1
61
2d868a615ef9884cacb10080e6f5ca30c8d49984fd9b9923ec874be56e6b7bc3
2026-10-06 01:25:28
3
62
2cedcc081e0a60c80940600b64979ca0663a31b55751d2e4d2f437e08f16fa45
2026-10-05 04:11:38
14
50
c8a2edc52bd034fa36525830f338f2cb48007465240257876bb5d1f1f6ef9034
2026-10-02 19:22:58
3
61
155c67183021e54adef754b6f258822e366765bc22dbcbe84f6195edbc0a4e30
2026-10-02 18:14:51
3
62
0c82bed879aefbb907b5abcb64336339109f963670858fe94b946fd6f849bfae

Rule Matches per Month (last 24 months)