SUSP_LNX_Back_Connect_Shell_Indicator_Jun21_1

Rule Info

Minimum Yara
1.7
Av Ratio
17.87
Score
70
Description
Detects back connect shell code as used in Linux hack tools or payloads
Name
SUSP_LNX_Back_Connect_Shell_Indicator_Jun21_1
Date
2021-06-05
Tags
['SUSP', 'FILE', 'LINUX']
Required Modules
[]
Rule Hash
d7fa33c871224c0599be20207cb9f59a
Modified
2021-06-09
Author
Florian Roth

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
50
Suspicious (< 10 engines)
30
Clean (0 engines)
54

Rule Matches

Hash
Total
Timestamp
Positives
VT
46bf7ceb9826f2210ba66051d445cc66b349fabe2f533b37f9171d83b3431b61
56
2021-12-06 08:12:50
0
47e29f6b8d36a9d72142c17d0b01f3d5b51a97e85e7e1d121a83265a0f14b270
56
2021-12-03 12:47:07
0
5742c63ce76f74f248b73cc5a9004875d7988669e4c95c517c6bc945eb59c84f
55
2021-12-02 12:43:22
0
ccc95e94a9f8b93e619b02c3af3017c64effc4ddd957e183b6405e0a88a8fab1
55
2021-11-29 17:22:21
1
f9c6ebe13a6542a8fedaaef82e903d3890d3b29a936e6ab772dfe3b4f1a2ab65
56
2021-11-29 17:20:54
0
35f99ecec014d240a7c4858ee1e88d22ef8e9751316e50d1099e07da3121072c
55
2021-11-29 17:17:33
0
9fa875a881d77e159bf6ed866b5c83af57d51114e98bff3876adeb1c8836caaa
56
2021-11-28 14:08:19
26
eac78ca69bb0838204aadc60abe65c3c10b82189e2539aa131d5eb118f0e87cc
55
2021-11-26 05:59:52
0
0818c1252eee1f002e051f2e24d72c189a293fbc2050d6072ee4929832f5ad52
56
2021-11-19 10:21:57
0
d6bd2c9dcb2d25736ee88cb1fe97b96ee92f03745211d8903865958df254f418
56
2021-11-19 05:10:51
2
9aba79269bf7ee9eaf0e8235556e879a9c4d773e3ee6bd7d1298e5cddfcb8ba3
56
2021-11-18 23:00:31
0
3afdc738e02af4be1cbec9a5c6b4e3d4ba04817a1e1cccf297bbd1ce9a59760c
55
2021-11-18 03:05:24
2
9ba3d01d8dd7daa799ed37b706c2910e1b5f3cd5e9c538d0b7be3885c83095dd
56
2021-11-18 00:09:04
9
f653b14f087d081658fa19bc8dd292f2bc68df0ddf48474d26cc82057d3451ac
52
2021-11-17 17:50:32
0
a59068d9723c56bdab1878293c818a8b51e2a63d57a59d1601ae393cd0a7f523
54
2021-11-17 17:46:17
0
33df4fae1fb499e134b41284cef664c9cfb018ec20b689635059b5ce6cd02aa0
56
2021-11-17 17:41:58
0
549ea8ff5434d9e5031f4d89782facdce25f26528fde9e7344321754e6c67af0
56
2021-11-17 17:23:44
0
eda0165c415061cd402738204b6b9a1228e50c1d76d7bee5c3d7d99cbb3e5c47
56
2021-11-17 17:21:28
0
7c2a4f0bd6911d3ac635b1f58684944a0ef404f47446ebe7a391fa8fea4431c2
56
2021-11-16 11:10:36
1
49c7c9fb2be246291ce093990363377a87dd9abed2d51b1be53c1d3c93b937d0
55
2021-11-14 23:07:07
0
232a386c464e9227daf6694982c729a9f3bbd5a4b8d3376d941d9c8c46ed02e3
56
2021-11-12 18:51:51
9
7bbb4e088d79254106bb71c7b857c71292c984bb82d08f1bb7fa68d1323e9795
55
2021-11-12 18:39:57
9
73043957f48482e15b8dcd15a320cdfef87365ab6c55a570fb094a9a53336e61
54
2021-11-12 11:59:31
0
e88e2975cf3ed7f58ea972c0ca3743f52fbdcb7959ed7d4be85d0a695aacc860
56
2021-11-11 15:17:18
0
8daacae4498eb42f8a06391105b9c9d5bc86a27acf592533a02693763d1da687
59
2021-11-11 12:27:03
28
aa8dead6cea41c8dc3bbb7ad9c573f574f63617bbd3d86ef8e7a9b98705d9af6
58
2021-11-09 18:22:00
21
2556bd4f88fa894ebf1c825ef8a3835f36b91e8f16693ce98756ffd995926964
58
2021-11-09 18:18:01
26
7b08a8dae39049aecedd9679301805583a77a4271fddbafa105fa3b1b507baa3
47
2021-11-09 14:10:35
19
6f0f7de08e92bb95fb9d2b8ab0e5c1f60a101c462c2899e281d4cfac19e62ec9
58
2021-11-09 14:10:27
27
7b01470394bf543d21aafd8ad4b441a132a87a641f01ce20c9d09d5e5f3bb0fc
56
2021-11-06 08:39:17
0
49f02d08d6ea75042bd6efbf2eaed098cb324e87d2c353311141429cf202db4d
57
2021-11-05 10:17:49
7
8b2a5575a40c40636cddabd4ac9b92dde26f4915b181999c5f19e3c73edfdfb6
56
2021-11-04 22:27:02
0
293b0a1d14f2d682fc16e92c9ee6f003e0f4259b28796d73c70fc335e12dff0d
57
2021-11-04 22:22:40
0
05f51a5141a662a499277751e718b5c1d2e5ee610ead9bd9f445e4491601ca11
57
2021-11-04 19:24:01
2
1519027de85840f65b7dc88b11202f02e2b6e7aa0eaa639f1c963207774a386f
57
2021-10-27 17:10:35
0
108dcfd8a30e7e11f3a49f26b22bf0d9be28c3a242f133ce792017f01afcfc2e
59
2021-10-26 10:38:59
10
ad98da629b06ce06a28a54ce4ac6ee2840b23411554a317de5fcd1cd5350fac3
57
2021-10-17 23:48:00
0
44fd9ee06c1d7f55e1da1b2d34548e485a96974c2b7242b0c72b7bb45f4148e5
56
2021-10-17 21:59:08
1
656ee31bfa8e7c2b20d7429f89227e6390da7eedf9a5fb95352874061fed0ac8
58
2021-10-17 21:59:05
7
c1ede063f28646edc63079cc82b06ac63dfedb4d96504ce0c81271b74f16cc05
58
2021-10-17 21:52:42
7
82407d26c9c2ef0c26a51ab512436249ee3d05d556b436d87e155ae09b9e4f67
57
2021-10-17 21:50:26
2
578757d5329f77d9bcb2f9ab078b341114b302caddd5f6f937f0eb6aab1a8b73
57
2021-10-17 21:49:20
5
de2e4b39a1315384d613ce7fa88545a2f399c3662297eb67b9bb77a8ed875016
56
2021-10-16 10:34:16
1
5d8dbdd7bf9e8197b88806bbc30395e0d844c01bc0646682cc65676131338f31
59
2021-10-14 18:37:39
32
d8a53d024bce0eb54058c1454107a871bd1556fca839a61eb668485dd2168418
57
2021-10-05 12:27:01
15
7dde266686e3a79f77e2e89c5d556e51a4f84ef7feea0817625d6909f9668aa2
56
2021-10-02 13:13:59
1
06d30ba7c96dcaa87ac584c59748708205e813a4dffa7568c1befa52ae5f0374
61
2021-09-30 12:48:36
38
dca8a6a671e3c5fa5e22484bac56d9b83f0413cb1cd6e389f1af942b2ed68538
57
2021-09-23 16:51:47
14
0ce04191309d6eeeb844e36de0f26018fad35c2a35ec26562eec31edc423a315
52
2021-09-20 15:55:31
0
e1f1abaad42cb89ffe3d6f137fd591099757d8d53534a9d94d91a876b3fddf59
51
2021-09-20 02:25:42
0
5325d3395f9da5d7d9dd59aa4b63dd482c1a115c4f8353fbc4f67385fbd7c40b
56
2021-09-20 02:25:42
0
383e4feb8b05102b19a213eb0641c9bd8618bc3208ab95b6389a1c34ff03f31c
57
2021-09-20 02:25:42
0
c1812f3493fde23a70771e0b3e7ef9547fcd4c90e3de6cba2c65ac7827bf3998
57
2021-09-17 04:19:10
0
b05b0cfad6d32f9a56865d1e24cf02b6642892f60ad5d972b2f291484d5c7b50
62
2021-09-16 22:35:35
37
6dc4da271606c683955d063449e394cf2a088b9bd6ac14b0bd0a09766a2d47a4
58
2021-09-10 21:56:34
3
9ca233a95bc1ee61231cc224cb6f5616c3de344932e69009e45d9b14051e963a
57
2021-09-08 16:11:35
0
f72396ec28c0927b036c39f6a5d9aee6d863d3d7b88e737887f5e60c7990787e
59
2021-09-05 16:30:04
0
56cb32f21328e77b441812648deb466db3413ce145c2d6d12d48c0e8b942f3b8
56
2021-09-05 11:24:16
0
f96758ffc2899624ca6ca371a5ef1a5f3d93a9edf8b66ae4f01ecc516d10e533
56
2021-09-04 05:44:34
0
6a2224bb384547f03f0fec8779659b75722245e2a29e52a086069836faec2fc3
58
2021-09-02 17:53:28
8
e079ae6e41914cab565f20106dfc79f450c7c7e72af714dac0101894c6a12d44
57
2021-09-02 08:21:11
13
4c1a2e3f1b7bff220a6513d3aa3b47e3da09b5fe74fcfe6919b100225edb81c7
56
2021-08-30 21:08:07
0
0f76484eaa154332c75ec8f6721f688529ccad3b1859e297a8fc3fabc662a5fe
57
2021-08-24 10:48:32
0
eec2f4d6c9fb9df0a84495fc3a153b35d27f733b4dc22a6b182042246ab5a947
58
2021-08-19 23:12:17
1
f341b0c0e8d65496c7bbc74fc86e2144cffe1d7387ea248a54338c5bae006fe6
61
2021-08-16 10:12:39
0
40f40da9d2824b3a1466be243fb9f72dadeb497cd7a7d0bcbf26482271044b30
57
2021-08-15 20:30:46
2
926fe5b912a534a4e65b647bebaae2b81536734f3746bb9b70594f67d63117fd
58
2021-08-11 11:15:28
0
a9c72f6e7bc07a6868404b4b5dd6f8e62b4ceb1507d4904c3b450d2d207a0e7c
58
2021-08-09 07:54:14
1
33b5033a68d9c9eb7a8ed8cb9621de657c0e3f55c6ee35540cd147acf9de3a8c
58
2021-08-08 14:56:30
1
7ed2c6cb063297987a695c8246ca31ef15b4badf03032d039b4d83e425c8fa7f
58
2021-08-06 10:03:10
0
f032374f386fa328c6e154578706e4eadf135c987673f326517d91a63c71e22d
58
2021-08-03 12:51:26
0
8e6c6c9ee92e55ed8f25d437344566eaab34699f95b2b2577163a9f5fe89fa5d
58
2021-08-02 10:53:49
11
d5141f6b15a04d48ce8197616e5b5eeb94baddb9734b40344bca7a19f90b304f
54
2021-07-29 00:05:22
6
eddbf9f50dcf8fa2a00dd230431fd10ced3319923f9311bea19a4e5ffaa33890
57
2021-07-28 08:09:17
0
b893b57a2e6f46548b98d4bff9801e80908a03646cc6c8e7e4650ca807b2038b
58
2021-07-27 02:24:30
0
cfcb29f43e158ec45173cebb8c76617d0f04df73f23aa31203825d69f6cfb9a6
58
2021-07-23 17:09:57
0
f9faadadb43bda177d517134d16ec9deb437eac5b4fd522f775fa3c5b5e01c43
61
2021-07-21 17:05:10
35
622574858ad5dbb7a34479f38f90709e4595d89b1e1d807078dab125d566a2f1
59
2021-07-21 15:52:45
20
9ded00d35a7a4c5e5b29c34c3fdfd8d829f642b87a378a65aca1d51f231366a7
59
2021-07-21 15:51:33
26
97a6c0900b8b143d384055ae61bc5a7391cb243f3aef2b51bb399e1f087cd3f1
59
2021-07-20 17:40:41
2
0edb8fcd5fbeb6f7ee936dc01a2f3931bb8c2b05bd76f38c8ed50dad31652509
60
2021-07-20 00:13:17
7
25b7acc603d20135e910e16e9765aeb4ca075a09d87a22ed62eab6a6304daca4
58
2021-07-16 18:40:43
1
98c972297f6d3453abf96ce8cbc88dd319557ee47bcdaf07982621c3f8ca7de4
58
2021-07-14 14:19:16
1
c0a3f7f19057f02d1c7f0ee24849ff8b3dde26347e9dbd3f589c649ce037fe1d
59
2021-07-14 07:15:32
15
709fd45ff369902b530f3c2470b6e0c49b431dcc2ab20e74bc0cb339de336e53
59
2021-07-09 14:39:31
26
b25eb9b761ea91c93c67976951a764d0176b18568f7811d9412fec69f76a6c2f
59
2021-07-09 14:37:18
26
7fb7dc7acdfeb08e66d8cdb94a96e0235ce7de49d36b360ec3d24ad2d1c77525
59
2021-07-09 14:37:17
26
3bb940ddd980dafd9444e471641d47856078a41b796dee85a7d02125cc55e5b4
58
2021-07-08 16:49:07
12
fdd8c27495fbaa855603df4f774fe86bbc21743f59fd039f734feb07704805bd
59
2021-06-29 15:54:25
25
45422231132d5c235a92a332a753b8226d9aa2e80b1cca3387cc14806276da47
59
2021-06-22 21:24:56
14
c98e71340990df0ea47efc72a806ad7f274e00e131fccfe23cc09bde2c60df06
69
2021-06-21 14:28:25
6
5c8d36b69ff4b15a0a540573e6296d9f5377abd421b9d5debff6afe341848c8e
60
2021-06-17 14:52:55
28
ed847c62cdb09f6d50580e93f9397383def98887c3239e4f240806e5662d71d4
60
2021-06-17 14:51:52
30
3f6395b6ecb57cd3279f60f1ae2a9071b7703fcef522de53050c13517c07f72e
61
2021-06-17 14:51:52
35
f418b4a89d393bfc1fbd4ddd8021718b17dd1a29f7b7906c0773560e82fb11ad
58
2021-06-14 17:47:23
22
3f23864a7fce1ccf4c7c9105d312540887409ea7dda7e2bdc137475f26c19bb3
60
2021-06-14 17:46:56
27
6f187dc517aa47eb831ed302c7a4c633645fb397e95e9ba5b9603747d015bccf
61
2021-06-14 17:45:10
36
6c8ca8e50a289841d86b1bc3e67ebe0e668c2f9a9b3571fd6d3252c569f216f1
61
2021-06-14 17:43:58
34
b63a6e6981ac9e96abe9deb16d399a6f1d026fe755551ee908e79d699c063247
62
2021-06-14 17:43:58
35
fef8f7d62d7e9ebd78750ac0b628af416f0f5979f1d7ffcbf69a539dec418022
59
2021-06-14 17:42:56
23
a05422f5093ce07066354f8fa7ccfdd242380f01becf42383d72927ca3c32f54
61
2021-06-14 17:42:56
32
71cfee3417f7f7202a3b237fae3910f01177b79fb641ea12545bb573bb8d6afb
61
2021-06-14 17:42:17
25
80bd3d5e590a81ec59e741da471ab26004a1e01a968eaa4cb1dced7589fb3fe2
61
2021-06-14 17:39:46
33
eb59412d7cbefea8b9cb59a7bf06bb970f02e599df3b7d936193f37b29dcdf25
56
2021-06-14 17:37:40
30
d320bcf24e0e5656ef1393f66a94ab7320b5e45ce81dd719f1bdb8e48dac5d9b
61
2021-06-14 17:37:40
28
6f5581d041aa2db8de2d697c44a9d9ae53a9a6a6586f9dfa0fe1eed33b43bd76
59
2021-06-14 17:35:33
31
6021e85fa05bebfd1f274fcf2d72b2e9d3ae4770ea9b4c76a58f45b24f117a1a
61
2021-06-14 17:34:28
26
542c1cc154f2284d89f15584f8b969819677a21c394070dac6dfcd5b635605cf
61
2021-06-14 17:33:24
35
095cd6d244d2099df47fc56d99229d47f0770ae806ae1594b3aa52095b7a9666
62
2021-06-11 11:41:24
36
002b5aea92072e84933c3f7376df8cd8c09d50dc0c3277488e1870baf3d15a07
61
2021-06-11 11:38:49
30
7fde30c83ad745088213a2407c7301ae1d307774aacb8cb566d3785d276267ac
60
2021-06-11 09:41:14
36
3cfeb869c6ac00859dff9f293778bcef788b32ec7ef436f23f92508f86ac335f
61
2021-06-10 21:49:09
27
1583460b76ffaa0a1ab304464c3bcc1c346e2f4d9156fcb3713149bf11a10ec3
61
2021-06-10 21:12:47
36
0e1984d7ec6a4e73ee5faf9c77c0a0025c190c61dc7c7178761aa38741cab36e
61
2021-06-10 21:07:30
33
0def0b0df88a0835213f2e348ff59e960d70b76a5b5aef33b1a1a4154c707be4
60
2021-06-10 21:06:26
34
e7fcdd327b4588c7665c1cfbfe35acac6e44c8196291ebbfd3e55e6c8640efc2
58
2021-06-07 13:07:05
14
8956389a7a50dcf4b7ab221c1b91172e7f7fb298dbf43a8251abfb76334e7a4e
61
2021-06-05 11:23:55
2
8f7ef593382a93ea63a4643c3f501126bcfd5975567c4401e3bd1ee19e221740
59
2021-06-05 11:21:25
16
7fe4d08596fc13f16ed9bc29345a09a153e7e006bad88289836092bfc0e1ff1d
61
2021-06-05 11:16:37
1
17d1161cb5eb6148d98cbe61817e4ba27261949201ab21034161875251f2fa96
57
2021-06-05 10:57:47
0
12fea1c7b72be7adc3c17e5a1aec6b4faf8d29ab00b1317e6396387663efb25a
59
2021-06-05 10:56:42
0
1dfa1763a35d18b377ad1d505131a24822d95e1988a0c508bcaf16fe454596c3
59
2021-06-05 10:56:41
0
1cbf43b80d50d61b78f03d453581832404fbf25e712781f53835c31633ca783e
58
2021-06-05 10:56:40
0
0d4b4abcc03b71748b9177f4f94dfc0104eaf9ecfe90e2847495318c8698b315
59
2021-06-05 10:54:31
0
0f5455cd4128a5288b8aa301d40aa93d1a5f6aed14d3fdecd9fa811bbb52e283
59
2021-06-05 10:54:28
0
05fbd81a1c2754c53453e2c4dc2af0c3a21be40a24e02649706538d5140841ed
58
2021-06-05 10:54:28
0
0b24354e77ee4c32f12fa991ee91dcb66479304c6a5d9b4a6628e010e4494f00
59
2021-06-05 10:54:27
0
0b6083c90c7e0c6bb9876ee38c7993e737cb37dee83e77f455a1988e0f9e117b
59
2021-06-05 10:53:29
0
059543f9271c2537177ea2b06dc8773ffd4899caf11591cb0a6db4fb39cd5239
59
2021-06-05 10:53:29
0
0404daa510977eb930d2c57ebce45930786a7f734914c1863ea448618284dfa3
58
2021-06-05 10:53:27
0
031f22e9869bcbc750e0aa420c183712de06952a16bbc6083e2a07554e672547
58
2021-06-05 10:53:23
0
092b0dae82bb99cd71bd50eaee02cf4c3e1c51be43efb5e43db221d5dc068a50
58
2021-06-05 10:53:21
0
022d22576059c21c78c39297384985160ddb3e02b5244fe64aa40ebd4b559f2c
58
2021-06-05 10:52:18
0
00194eeee3333bcdedef60e7f1c2a4d6057fb5b7b25bcc979e9e3a9ddbb7a30c
59
2021-06-05 10:52:15
0

Rule Matches per Month (last 24 months)