SUSP_LNX_RevShell_Payloads_Jun21_1

Rule Info

Rule Hash
75565b43710a85778d18d6b1a8fc0a5e
Score
70
Required Modules
[]
Minimum Yara
1.7
Av Ratio
15.15
Description
Detects reverse shell code as used in Linux hack tools or payloads
Author
Florian Roth
Name
SUSP_LNX_RevShell_Payloads_Jun21_1
Tags
['SUSP', 'LINUX', 'FILE']
Date
2021-06-09

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
45
Suspicious (< 10 engines)
33
Clean (0 engines)
21

Rule Matches

Total
Hash
Timestamp
Positives
VT
58
c17567d5c891518a24dd7421b20f60965714b42fffc3b29acaf07cb066e4e064
2021-08-01 12:03:22
2
58
ff6af284c2d245255ed4fe0809d4dafc09adba57fb43b6b59c9241f7b937980d
2021-08-01 10:36:52
0
57
af9dc726f9c0fac0bf85cb7bb9705552ec00ffdfe0fba508e2e56275a225c787
2021-08-01 01:26:22
0
68
e2b8b504bc737bd562dd5e7f483f8e38537cd16c015b5f957fb73f7534ced919
2021-08-01 01:21:05
31
58
b9253a79eae676a2cd067643b2f41946bffa485582838bf72b409ebe6b47e1ab
2021-07-31 20:19:05
1
69
45fa361d1618c1ff7fa13b3c9589a27ad18dbf249788691ee3390acacf569b31
2021-07-31 01:02:53
24
68
8ddb9331237d19f7078f8dd2a1586045a9b5e342b07661c08aacb35202466bf6
2021-07-30 23:37:34
24
58
1c32c753db1d55bda75bc662ff9ff7c59bb7e5b5c203c2ec5dcdf31ec8f1ea7b
2021-07-30 23:32:11
0
57
0e5b8e7f70140ce8951a0ce94d3584c47920fd70e3daf3d185a1a65aa0c87023
2021-07-30 23:27:58
13
57
121d0d2a0867716d629eb10280ae2ae921b0257c82bfb8b7a99c234dbad3ce4a
2021-07-30 21:57:59
11
58
5c788459ea9a29d06c32b34d47c8ce7f54c942c777af7c0c697d2a88a5290521
2021-07-30 09:52:19
14
58
418ca8606ac1947b3abfe0f071b25c1c6ec3b37bce652a27bacdfcdf249bed56
2021-07-30 04:53:45
14
59
011df7ff3744b96c798c2ba7e8338cbdddb271469c1c62bcea8b7e415fc5b823
2021-07-29 18:25:57
2
58
015547321e85c0227bcf4ca1f303c4b807226e1f9eef06d6d7f99a90021d9631
2021-07-29 16:44:57
1
55
9543d090ffa6c37f142be821650af7f216658c81d184f88a2a0854ccc3b87873
2021-07-29 13:31:58
1
57
f33b9826aba582e047b2f44a3c46ea0c4c5ba6e8e908c772ed2e556ae661edef
2021-07-29 12:07:25
11
58
1d5e57fa6b191a091e8a4513e6960a704e496244543da776a46e16cdd8aead2b
2021-07-29 12:06:21
11
58
290a45c7c5d7ef2844050a0dcd6779595a56b3b26f761da5bb98c2c0a45070ee
2021-07-29 12:05:12
11
58
2d9738d380fd7bb55be686f4da25ac8d48dea416b81f28bf1c0f8229e01d73a4
2021-07-29 11:10:39
14
58
d9e7eb99db38271028e72638a1b37474eef6ea62014301160385aded73b95371
2021-07-29 04:45:48
15
69
2e1f7c7e691eb8124f5b4b6f8b5348f775786280de6bf237237aff2fe87dc544
2021-07-28 14:19:31
20
65
74476f20e5f5e5a03091367a431d8cc37cdf086ecc2485593c13e985ccd9899c
2021-07-28 08:38:53
3
58
e35df99994b96a5821a23133179940cb960338c13ebcb143e237a71a68b0872b
2021-07-26 21:58:29
0
57
ce476f8a426e42a1a045d8055f22543b05173167aabdaa87f767ce0218da466a
2021-07-26 21:57:27
1
58
4d3001dd58c1e57d5af26b3301ce2c2fde0b48f6bf4a6e07c70e0a3fd5338e50
2021-07-26 18:25:13
11
59
1e1e7c0490c10a0a0789ccf10d48420182e17c5c53a7bde2db0ae08f9d56acc5
2021-07-24 22:21:13
20
58
7a1f68faf2c40139622f3a807a12128e13fd17f24b5e24008f237ba7c16f7172
2021-07-24 21:12:01
18
58
825a94256cb045729c8bc31cada06006092f4938407699d185d028e21141973d
2021-07-24 21:07:14
19
58
043f5344c87a7d1c78e71f81d9c4224f97e8523256d1791b63be0c88a7cb189a
2021-07-24 14:24:34
4
57
128600e1ccc258a6a7c0d3b6e2751931b255d1f982394403c43c63b770dd5a91
2021-07-24 04:20:27
0
59
44daf518018e22d32827114e0f3e54cf9595738d4468bffb166258e57073670e
2021-07-22 20:20:59
17
58
aafb7e05520448e52b7c456898eecbae05cbd4d1786bdfa075908cacf956bcbe
2021-07-22 15:35:00
1
58
77a93b9b7d25478cfdf33216c086545ed0df1b6846e64fcd2cffac0cf002a2fc
2021-07-21 23:26:19
0
57
87a37f5f5ccf8e4f99edce163e4d000b2e59fa1dc8073a230f888f20afb731e1
2021-07-21 18:49:32
0
56
7e218d5f880bf20d57751f23a9bf4babb2d319d6a98478d92c1f575884584a75
2021-07-21 12:52:08
12
58
c6a968b73db0d534b3de7652f510612acd5d8d76a90231652ec6ddf380522b64
2021-07-21 12:38:42
0
58
4e3a715daa96aa81023c4ebc026447f30efe3fa70b8cdf78f3ca5edcff272218
2021-07-20 16:37:03
0
58
8538822bc021782384b94c3fbfaa6b2649594ddfb995a12bbe8e3e02c822bef1
2021-07-20 15:40:57
0
58
7798fd5ed754c5197f1287967870f63729677dc195df306c8505dee69fea85c2
2021-07-20 15:03:02
0
58
43bc6df80a332fd88ab88a84d130112e5b6f41d2977509da00329cff7a39067d
2021-07-19 11:51:41
1
59
600911871491806f21a5effa29fc6934f85a1f24501a4882e29ba16981b39876
2021-07-19 08:54:19
15
50
ab85a3cf7584f99252b17317f140d2c5f0921ddb14d45f7f8255e0d9bc73f644
2021-07-17 15:57:12
12
59
a9a7323ac0a595e67cf2c23372455c3758ae4274bbde960ddd3ee5742c77b207
2021-07-17 15:35:55
2
58
98c972297f6d3453abf96ce8cbc88dd319557ee47bcdaf07982621c3f8ca7de4
2021-07-14 14:19:07
1
69
b0a6f35394f66e0d4e4476af7d117d11c527808c940a283a0791071cd20db3ed
2021-07-14 02:40:32
25
68
0731d7727667078e3b4fb3d9c23d6cde3d1f896e4564a8b8e2449e7cc779c55c
2021-07-14 02:31:06
21
69
cf36ef0bcf4eaf5c8ce32b06b1fa1b748f1f22b3b1e13ec88c940596d1d43dc7
2021-07-14 02:30:03
24
58
609946805e449bdddc3ff2c5811afc157837b1a078bba88f18d39fcf0bb4e47d
2021-07-13 23:23:07
0
58
008b1dd4663d0049b054a5428aa304a672a8d972918b6f5cab7b1faa8ad9d056
2021-07-13 22:07:18
0
58
789041be7f8dfe5eb0e6454a14b789633b2192d91c19c8d4aaaadba9194333b5
2021-07-13 04:12:58
0
59
cc8a3ef2ca906374552070ce8bed1e9aefcbddc556dafd7ce5fcb5ac7cc957ec
2021-07-12 21:12:55
20
69
b3d2d87b0775789d4f44cde006fa7e5ff2ecaa9172500c6b766d6a6295c1e263
2021-07-12 20:28:15
22
58
b8d30042f6966ccdde90c16fd2228d2704566a9c36efa682911fa6c0202e1d55
2021-07-11 18:12:16
0
58
713d1d6fc4adf9ea1e55c8611dccaabcd279676ca59f1716da4426297aad1668
2021-07-11 16:17:16
14
58
0083156b71584563147d4d9f35bc1d6659e19b2c88b3186edbaa6227ba8bc87d
2021-07-10 16:52:05
12
66
27dfdc6db5174e5272f1069f037f932e5152ed6d09511cc37c4395167d6d8ffd
2021-07-09 09:12:21
2
68
396b1652e1fbb2e2cbfdf0c3da3d49bf5c3ffd0981bc0e6864b61c05d9a20bbc
2021-07-09 07:03:59
32
69
ba1502637b63d5bb29952ca25c3607107898a1c378fd4b86bb74bf9bce675e95
2021-07-09 06:24:41
26
68
86534146698df5254c9ea577022b825977f6ce532f895b246537e2d9a8901192
2021-07-09 05:29:37
23
67
bcd2719211f221b04630b3c6e936db401d5c22df8a42853a1fb59aa13bb3eae1
2021-07-08 17:50:14
21
58
247a8de5e76ae59211f85a1d69a07a0cd66d0d8b3335d8ed3391969d713b2597
2021-07-07 23:34:52
0
58
368402f569fc03e13df82578c90a84d8fd658356a9504aeca83126789102c030
2021-07-07 23:17:16
0
59
63edd76f2b76e06d3b1f975b08d2a2e7b90f1f0a32e8fbae231be3664f0ecb42
2021-07-07 21:37:43
12
58
ea9732dcec898cfb4e2ce5eb028fb014c6d64fff6da8d79cbb527c10cae8bc0d
2021-07-07 21:28:09
9
70
bb482162fcc8dab66fd9f970e782df174180d5c7811925662a0c4055b0344e12
2021-07-07 20:45:17
24
69
530792a32688d2b296703e26fa7fed89d0888772c6aec59898d882b5eaa79141
2021-07-07 19:18:21
20
68
1319185973ca6fe1b8e65a30c4b771606a525f568c918ca037d39a4b63e5e402
2021-07-07 19:17:15
22
68
c8adaae38ab2168847dd276bb47bc9c8ce9d3bed0d04136a2e89a41e4f0817b5
2021-07-07 19:17:15
20
67
3a58d3a8643284f184aa0b0f8af9327b0d242de3f48b241cce3ad8f178f78ced
2021-07-07 19:17:14
23
67
4804f8833e33e8a322575133ae27b775de2ad18dc2d212d152f21539c9e4a177
2021-07-07 19:08:11
20
58
f9988a4c0e61672da185f13a09baf66028d51c180f62899ccf908dd8359177d1
2021-07-07 12:16:41
5
57
394de7f993f1482fc03664f9a736da36ed880a5599d0faccd303b09d8b7abf37
2021-07-06 23:52:13
0
69
b20a6fe0cba8750c1136e777ba41dc592b33aecb9ccd5caa38e8522a3be5a064
2021-07-05 18:04:01
1
59
1ba7e710a1f58ef985258c06ca1cb8bea7887747ee7ca7c055b0d7d7f2a59486
2021-07-05 13:29:16
15
58
d3088d93b39ffb747c0a5ef8e86e77eb45dd6ceea3f9d691d8122feee03c0cfe
2021-07-05 10:43:54
5
59
417e579ace0eaae6d30708edd66b8044e92c02b6d07855fe21b0b187a79e5995
2021-07-05 10:36:37
9
58
40df44e82a9b56cf9c6b71a70442011099544b36d40bb0cc9b56f8551abc3ada
2021-07-05 07:07:19
7
59
949166fb653251a8bac0bb7cbfb05d3aff03c6eeb8b5b34862d75967977f4bbd
2021-07-04 18:45:29
7
58
f9f30f6586d50793f2bca4e41cadf7f2c5a52fc6270f3b0cde1a3fc2551a6628
2021-07-04 18:11:51
3
59
0ec083a11541874a3df745adba69168a8e9cd02e6f4bec6c8056b6c0de66d8e5
2021-07-04 02:56:31
26
58
372214952532f063f5fa1dc7f00f0bac2851c23f0c2f0c4144e386a01b24ec7c
2021-07-02 16:29:43
5
69
4d5008c4b0d06cd769f3b9b11b331a5ac5f9f9cf505a6bb64cca987acadc171f
2021-06-24 15:49:12
19
61
9f20cc8d49a13780ebe29c3dbbf120b9f8985b58eb2995305848f934cad9db07
2021-06-23 23:09:10
2
57
18ef844ef2d92976c2d7ae501f472096132f6bdc0db11cc9ce870b6efc24d02b
2021-06-23 21:44:15
3
61
880df9db805c3e381fd1f71deb664422d725168088b1083c651525dfce5cb033
2021-06-23 20:04:22
3
59
94b1c482764f82e769b7fe97f042b05c78de5833b9e4b160297f3123d6d89b0a
2021-06-22 11:20:49
10
58
a958cbecf7cd7d93708b363c40edf431dbea055ff964f85605547904ad9f410b
2021-06-21 19:55:27
1
58
5c817686fe89b4c17d1d70b963f4ba045ea87f449809a32c4ebb1054d32083c5
2021-06-21 13:40:23
0
58
51c039f62894050ba0c9aa34df96f689b58c909631215b8fabe994a5c9053cab
2021-06-18 20:44:34
2
59
af9e1b242f73e477df4d1ba005002af79c739ab5b7b1cf631c7db3eb95e73c85
2021-06-18 20:34:45
4
68
213bd9923f1310a48d63af278f2ac7cc7cc3228c8fbbd798dc9ef8008937812c
2021-06-17 14:18:38
1
58
4f399f1063840c585459d0deed5956fc47704b042bd888523f901522d7812323
2021-06-15 15:15:20
4
57
cdea7a6efd690afbd79fb3491c8f69c17be9f962e0645804a2877b8edb7ae47e
2021-06-15 06:25:53
9
57
160397b27e347b2684a3c7a04892f60114cc0124980ec893f07142e9987ab10d
2021-06-14 22:58:05
0
57
4fedd3490e4100cb985e0442a60f4b55c8d89adc6a4c5d474b55a9cded50d78c
2021-06-14 22:45:52
2
57
28a3bfec48495ff3580d0f228ecf463723acc234dca52616e626b950e754a0fa
2021-06-14 22:44:08
2
57
0c66071424ab9cdc61d42c77404aa72e19d3a44e137a665653b0fd2712e2caa7
2021-06-14 16:55:08
0
70
a5306f00a70a29f66309ebaa8c1bf5d08eea336943a5d41ac2573ce04e439de0
2021-06-11 14:12:33
38
58
26381a23862549dcc95e7eccecad9fc8b46a0a80389f36fcb259115aa3f699d8
2021-06-10 04:30:14
12

Rule Matches per Month (last 24 months)