SUSP_LNX_Crontab_Wget_Oct21_1

Rule Info

Description
Detects suspicious wget command in crontabs
Score
60
Date
2021-10-02
Minimum Yara
1.7
Name
SUSP_LNX_Crontab_Wget_Oct21_1
Required Modules
[]
Modified
2022-08-27
Author
Florian Roth
Rule Hash
da7dcd4bd25f2b55ba1a26cedf59bd03
Tags
['SUSP', 'T1105', 'LINUX', 'T1160', 'SCRIPT']

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
8
Suspicious (< 10 engines)
80
Clean (0 engines)
17

Rule Matches

Hash
Timestamp
Positives
Total
VT
066df0ec20b19d8f8b33bd500473c3fe1b09f50b9569fc27e9db5c449c5efe77
2023-02-05 11:48:47
2
60
08b9152b7e70433b4f95e62629c2b1ecf4891f44b8f20673800ea450922d8cc1
2023-02-05 11:48:46
0
52
21a82c41c8d70ddf0008282ed2a2ac09b8b5b8c19616ad4c5aeb12b5e2e6edd6
2023-02-05 11:48:43
2
60
4e0fd460c3b14e787393aaed2ce4f467d7f28f0bcd2c0e273b6a4f7c36de0769
2023-02-05 11:48:39
2
60
59768c02e8cf638bc8f617d69031612307851ed995eb80bbf11689c4bd9e8a66
2023-02-05 11:48:39
2
60
60ba56690b9a69059c4f7d1a45ad147e724e4ec25eae56784f64c8d7419a0a32
2023-02-05 11:48:39
2
60
752d4957a4147cb05bafdf0a4c65791e46eaebdb2ee92d8f17973b1dd88bc508
2023-02-05 11:48:36
2
60
a19f12847eae180efeaf108c1b22cbb92662476d0a507874f7a1179d67461437
2023-02-05 11:48:36
2
59
965bf1bb87ad9647dcb8042e9d796d25f6bdec9aa81c9e7a2d5356bf56ef32c6
2023-02-05 11:48:35
2
59
b2468e494d2456292ca78c861d6f92d29f82384e7fa2623503e36be8aa83ed29
2023-02-05 11:48:26
2
60
c1e7ecc8e43235f704c33ef7593d46b5f9eabc12f76005cd0a08b6601debb4d4
2023-02-05 11:48:25
2
60
c3580947e46972a27dbba88b660bc30bc9a4943255ce22fa8e20691ac5f77b5c
2023-02-05 11:48:25
2
60
dbec62af5cc20457465970f4b500aea46393d0db1cf687a82b457d80b8c3486d
2023-02-05 11:48:22
2
60
ce8df610dcc0ae4479cb9de5c1172d42e43c96f332edf3a7a73126e925a72dce
2023-02-05 11:48:22
2
60
d11ce60912f60cde1b1f6f8c5d7b6cc53167d5df5a705caafdb48825fbd0c471
2023-02-05 11:48:22
2
60
ebb3b77492a66156e50bf45811bc2a1a3853a289d467022bcbf9f62ff0df352d
2023-02-05 11:48:22
2
60
0a1a99cbd64de337c851df6f3459575692bb111c9083a10901f68c88e7069cd8
2023-02-02 13:57:32
2
56
03a68970ba026d55b8aff08d6781e2ce8aa94e42a40c331ce7200cafd05cc6b2
2023-02-02 13:57:32
2
60
15a81bbc65f81d5464e695f5e36ba47df0ff7c5772f8af21e32c9669327c9de1
2023-02-02 13:57:31
2
60
1e2c2e2511497d11a3a280d5f1a7fd8c8e3c74202d90a7e954300db767837c06
2023-02-02 13:57:31
2
60
1f6c46828fe175d511353278d639964e6a92ec594204353d227a856c014d4bfc
2023-02-02 13:57:30
2
59
24de83493c150a5a263aeb16d45cae25391be52772b5a6263516b7d1e98b5304
2023-02-02 13:57:29
2
60
29c2b9faefdce929dba33d72aff31481231c6bf9ee43635fc66069ae8d45961a
2023-02-02 13:57:29
2
60
572685e91bad6f4ce5057a8752552cd6bdd91091e6265ff80ba70ffe5ceb25c9
2023-02-02 13:57:29
2
60
428ccd3caa032bb0bedd9315208f0fcdaf5ded7c3f1486f04d793af795702765
2023-02-02 13:57:28
2
60
58c873bf41951d5c2a60896dbec4e1a207e20aaca1a1e83d4181a8a9d3db0f0b
2023-02-02 13:57:28
2
60
5a755ca8f9f6f6a04eaab0dff783976b1036388ceb29b3bfaee18afbba0b6e5c
2023-02-02 13:57:27
2
60
66ff77b185e5964f2d7384d12ab74b5e0cf2f85094474726b57e52bd0859ccc5
2023-02-02 13:57:26
2
60
63eb9c72c59e04cb8990b54108a9c6c8685e26737b449ffc757b8e0d3e72843f
2023-02-02 13:57:26
2
60
6b288ec141b6c98e0a39add0c11e7834435d1ee8ab4d675ab7e1d400c3504301
2023-02-02 13:57:25
2
60
7c57c9458852d1274757af46f9b7888cc12d0e74f5a16c55430a98821ef31a12
2023-02-02 13:57:23
2
60
755088d74ff67b7c25212636de6f263c05b54a7683106000cb3a947215288461
2023-02-02 13:57:23
2
60
8e964080fe57a4e81606801826bc215c945e1014eac2767b5aeaf79d1e048456
2023-02-02 13:57:23
2
60
80cbf2b9e16020227aa3490fdbb04edbf414c1f86a3b81965595a707cae406b5
2023-02-02 13:57:22
2
60
943c99096bc0825c8ad49fb47dd0836ed29cd50d6737e44a4ac997b816bbe9f5
2023-02-02 13:57:18
2
60
981933746880fdb1accdc75ae9264e973daa721e8c210e380185fb154bdb4137
2023-02-02 13:57:18
2
60
a15c90a33ac8fdd6553d0396bc828c1cbf39493d6d904f5816ca2a7e6c205923
2023-02-02 13:57:12
2
60
b25c0fde79ee36db0ae5a529f2639fa97a98fe48fa1ec1657503a176b212cfef
2023-02-02 13:57:11
2
59
b2614a969ef53aa7d8d8284fd301dad3199ebe5b5f3c2b918dfe84128f99eece
2023-02-02 13:57:11
2
60
b646f274f4d3902caae94e20ecc9cc63424703155ad9e26187e2507720aed081
2023-02-02 13:57:11
2
60
c2a1c7376ed95aeefdf863920f4b1c987f8a31460fe3b602765c3c6b29ef8217
2023-02-02 13:57:08
2
60
cad451b3305dada8c8898ea5d41d08dd7df03f1d614cd385b6683b6d3e13f4c7
2023-02-02 13:57:08
2
60
d4c2fb5d07f54d61eaeabf9899ec77540b88e490177052685182fd03ba1a79dc
2023-02-02 13:57:07
2
60
d1cd59e780a3c145ace357d349bb4b46951d20b78eed4bbe2a6880ec39fa61b8
2023-02-02 13:57:07
2
59
ec0b2a9dfa614e3e8e29e3a6dc26a2afe97d1bc3734c3ec94927bee5ee43cd14
2023-02-02 13:57:07
2
60
f820c6afdf9a5f052c22c4cdd2debb968b2cb0f0a47fd1149a7b575e2c283b66
2023-02-02 13:57:07
2
60
f8ff4d0f2e38b1646bbe3baa2703d6f3554940332cd3708d48598f945891213e
2023-02-02 13:57:04
2
59
fb91eed05aeeda745e188b968a48a0d6ed7a9c36363e357a7cc538c2e8b6db79
2023-02-02 13:57:04
2
60
66260c8ad3ca1e6f9b0dbcf0b63d4628efb40decc2e591a07de48e9d01aef861
2023-01-31 10:52:50
2
60
bfb6f8e81d0969e167ef9703e651a0e07c5681b3d58258c59b1e870044ac759e
2023-01-31 10:52:49
2
59
2abfacfe73e69e94f250033e5ee0ccb87db8de42894bfbac34620d5d9d3930ae
2023-01-31 10:51:43
2
60
2a9c0726e04377f8c64fc969e9d6dd6d3d3886ebf6c211db1f490ca9a94b9247
2023-01-31 10:51:43
2
60
4d5502ae6cb1ea7adbeccb2830822262d484b67daf7b63978c3bb7990eb8ae35
2023-01-31 10:51:43
2
60
5634fde8f49f129cb35a89c91536aeb6eb4ec3604619985d8586dc1a56ee412c
2023-01-31 10:51:40
2
60
8f264d8b8c08f608f3a5aae46dcce36b3b7c64abe449e9756adf40ef7a1075a7
2023-01-31 10:51:39
2
60
b0f5311a5fcf075a747cae5c6a0f5e4c806cf6eb65f00090233267dabe046384
2023-01-31 10:51:39
2
60
b4375f5748433ac2d762944589fbbde0617cb1d13def3a82f395a3bf87900c8e
2023-01-31 10:51:39
2
60
c7aff4a67c679db8b1542f250b534c84ed3b8c92e25c7e078181a5040eb4affc
2023-01-31 10:51:38
2
59
c4cbeaa7944410c55208975da16ab4bb37386730ae5051d89e497888dbb77d6f
2023-01-27 23:36:56
5
60
a7499f0fa5b7db09a1411c8b40ec7c0244c189934b1fc77f94934172bbcd37f5
2023-01-14 09:07:59
6
60
f4178bfb5e231e0c8896d8f0314cc4ee691f0cf64474ca95c74d89b8ba1ad4b9
2023-01-12 11:13:04
10
59
c65685075c7862fb61222df494eff71ae3b1fbf20bfcb03a7fe7e320bcc4190b
2023-01-11 15:13:05
7
59
d7558dba8e183d5c045e53590a5c0a19fe7436678d00000ee41b2bd794b8afcd
2023-01-09 14:32:26
2
60
3a0c1ff889bb4b52fd7cd6d0f53d75a3178b589802fb98507bfe9e4c7b36584b
2023-01-09 13:17:05
2
60
6935420d671d5022a75804238178325090c3cccb4b2767526208be533929fc6b
2022-12-22 19:03:01
3
60
fb525ada65a729a7a7270bd27ce70981218d2ee7abd9f619718065c3f0921460
2022-12-21 11:16:34
6
61
3218fdef5d1f32156947a864ecad7b2ffc1a7d8914fb4c08afab7b120212e10d
2022-12-21 11:16:17
9
61
aee71ebbf69368955799ee44e2bf2886aa09c6a9d7b6cc66adc425b5c13c1e6b
2022-12-10 04:09:55
0
60
5812ed6dcafd96f4b67a63500b6c1cc5fba11aa5bfdac1592f5b6510ec34a064
2022-12-04 18:29:20
0
61
a7a0833c2a43fbd58077b4beb94936c18d863c951ae2a42b1cf9e2482d900ecb
2022-11-28 14:45:38
3
61
f1e8c5cd98d22bfbc127165551ae85c30d81c80c5753bab7b7bc78b0407fc077
2022-11-25 21:36:44
3
60
59f0b03a9ccf8402e6392e07af29e2cfa1f08c0fc862825408dea6d00e3d91af
2022-11-17 10:56:04
2
61
0bc88973afef3570255b295f47776c8d76c2148123f48104daa7dc41b5bc71f4
2022-11-17 04:00:41
0
60
610ce62f5d940cde2c1ada344908aabea77ce33f324536817cd6c1704f6c32c6
2022-11-10 12:40:58
2
61
3717da169e7cb11b843c9d7c2386800b66e6fea34fb259c1c640e80dcfc508f1
2022-10-13 04:05:37
0
61
eb1db0d3f370e5c1698012df76b449e9e662eab10297f14008f1111c38193b21
2022-06-15 11:09:06
5
57
baa0eeff51c3d25cc473c8c09b373719f5c0d38b1d43eb8c2d27b8e9492fb38b
2022-06-11 19:44:09
0
55
a8a1672c179fb37a7ecb40564ed84b639e01c56c59f4f1e695a996935e876e11
2022-06-11 14:37:21
0
56
d0cf2c1b65c664643b92bbce9f88ada24cbdf1992d23b87497b402f426b34811
2022-06-11 01:30:17
7
57
682db452e498ddc88de931065c1286c164c1c10ab03b3554c51586ccc434a50d
2022-06-07 23:55:33
0
56
943f72c626f5ffb2775cdcbe9b646e8e576750bf24ba62793a2c8609b8526561
2022-05-26 09:11:58
4
58
7da803ddcc957c5c15350768aa33d08f734eb686824db30a64ca69678dce7a0b
2022-05-25 11:07:53
2
57
d1494794584a5f6aa4b4fc603c9e4df982f5904dc3bf3a28a14e1b47a6652cc0
2022-05-24 14:06:53
0
57
e1633a01dff67e62ea576a57660ce40faa021e4f5ab72243800ee92cae19d604
2022-04-23 20:56:48
0
58
e56da6ede5ba63969ed4407c0b90c2ae0f08dd68ecfc29ff3b1be170f435aed3
2022-04-12 19:12:03
0
58
352ddb44b0bdf60cd85f08a30839f387993e39b5533ff9f06d8a0eaaed667a99
2022-04-12 19:10:26
0
58
8b656fbc613826eafb5d392922aaf09cd780eb7d35ee7161b4b8b5a51a9ceb57
2022-04-03 20:10:22
13
58
6ddec0f9b80ddad110a94a2e39757679b6072f66c3a1838088e75df7037394de
2022-02-27 06:25:15
0
58
2a4cd08e61019f5813142d3fb691878b30f7eacd42b0941a30c2defaa8998d24
2022-02-26 11:20:25
6
57
e5db71a4cae258e7d14a6d3b1980708797a5295d86fe3c3892a11d33a464f77e
2022-01-24 06:26:28
0
57
85b2a5b9eced296c02149de03700a6f19dd8fa6c81e0e2dd73bb2e583eb63a42
2021-12-23 04:13:50
1
52
37ac51acc32af5e17da021cf9d10e3d93a755d490a49a84ea867fa7b5d479477
2021-12-07 08:13:27
2
56
5c26f10e53285161d92146f398f5d00ed52d73c2caa8cc1d731887bc9c409ec5
2021-12-06 14:08:02
15
57
b5715afa236c9ba9e4a3e279a01bc6e59d8256d3fae25b5cb1a14dc1c215c92d
2021-11-29 03:09:51
0
56
360d768957d92d36c4b9d715a606da4178fe17c74950862bd192b74bfbffc899
2021-11-24 01:46:26
27
56
404199777a6d1b0b1f02bd70299d374e5aec1649ae65a81320852b0698d47096
2021-11-23 11:47:56
18
55
c1c5c496bf94e1fdb8439081feb447d7060a026bb1512910d3dfd6f99aeef8ca
2021-11-17 17:40:51
0
55
ddd150fec762193ca11b791a2d8a3ebcfc88c81e820512df4dacfdeccb2d9b1c
2021-11-17 17:39:43
0
56
64cd4d10b0e2e9b47d203a5e6ad25ad8453302210d5b1493b7f6a7af76a1c1f8
2021-11-16 11:07:46
2
55
cfdee84680d67d4203ccd1f32faf3f13e6e7185072968d5823c1200444fdd53e
2021-11-10 15:17:05
20
56
1bca0088f84d9642002e8d403efb77f75596a9d9c50f171e587a66cc804fa971
2021-11-09 12:10:13
17
58
6ec8201ef8652f7a9833e216b5ece7ebbf70380ebd367e3385b1c0d4a43972fb
2021-11-09 11:31:02
22
57
e6fd350986dbf0c852a7d8a11b6aef178c651f2f29c27f79dccdf7f57c47a82d
2021-10-27 19:04:17
3
58
0be9dd7ea8ac7dad67dc7aa0833c46fb288b0da7972739f9656a74fb6125129d
2021-10-26 14:36:11
1
57
35697d8239c471d1f4d1d9a8fb1e141983a0dff4bee99aaa41b5dcd1b01a580a
2021-10-08 15:20:39
3
58

Rule Matches per Month (last 24 months)