SUSP_LNX_Reverse_Shell_Indicator_Jun21_2

Rule Info

Minimum Yara
1.7
Av Ratio
7.98
Score
70
Description
Detects reverse shell code as used in Linux hack tools or payloads
Name
SUSP_LNX_Reverse_Shell_Indicator_Jun21_2
Date
2021-06-05
Tags
['SUSP', 'FILE', 'LINUX']
Required Modules
[]
Rule Hash
c1f7906900603777144bd61f3e10c09a
Author
Florian Roth

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
13
Suspicious (< 10 engines)
58
Clean (0 engines)
37

Rule Matches

Hash
Total
Timestamp
Positives
VT
c401bb6302a1ce7e86a40262c6a51ece1f31ce10d42913a097fe6cd3243a30bd
56
2021-12-07 09:17:38
4
8c9a1d1e89af8bdb0b470c76db96447844c0424120bb3fe9439e83b2d4a80a66
56
2021-12-07 09:12:28
4
0ec07c41a9bca66b8a878409d6b58982d4d525075b635c12abb8a9eb19e21ecb
54
2021-12-07 09:00:31
4
45c78e0d489848a2c0e4588d88e2a2b1e334922fd7948c4d37fa6bdaac0de2d5
49
2021-12-07 08:30:40
2
731d2b6f1b30e1b11713317c62bb86d94b679322bce0194d05899ff1797d779b
54
2021-12-07 08:27:19
3
38ecf5ec678abd358cdf1bf7d6ce53243a314d37ef1c1820aaa808ec5a6dfe97
55
2021-12-07 08:26:04
4
7b4e8dbba7d2c2065f0766bbd94ca3b191f3a08ba83f0c864a5dc4750c7cfb9d
53
2021-12-07 08:21:20
4
02bfa27e43299510e3a4056591838e0e46d58451c0ab2a963d8b63f471b60551
54
2021-12-07 08:21:16
4
22b8fb17caab1d0b5f4fac6437d3862695de1999046de35442a62f92a1c19332
55
2021-12-04 12:57:35
1
65e1c686c87889a60c9185622be25a187edd929351c070a84acca99b5cb62493
54
2021-12-02 18:08:45
11
5742c63ce76f74f248b73cc5a9004875d7988669e4c95c517c6bc945eb59c84f
55
2021-12-02 12:43:22
0
1ab2313ed797bd662c8ecd34c9041dd4f171d4668cc8344d52d0f7fe76c7f324
55
2021-11-27 18:33:44
38
0db07fda6db11a31aeb1df8cff10ccab802a63c71a1723c40101ea1d5ec06449
56
2021-11-26 17:51:53
2
dde70518b9d4b98b5193ef320a42cfa2ce9d269cff9032f11d95d125dfb3a822
55
2021-11-26 17:48:46
0
b3aac7f22aae23ae0b9c9e71b30a5ef7783ecd58c00530e9ad6f89e2250092a6
55
2021-11-26 07:32:28
1
046a5b4e8f0bca76aa6a7e4539ee5de5d2e645df803193ded9d80f5a6cca0bbc
56
2021-11-25 23:51:21
0
568ca2172416529728c08429ab55a9aaaa95970f41224f5cd06b357204581251
56
2021-11-22 16:26:38
0
df44a133862346da1f86c2c5f31726310b2486a3f768c34aff25e5b49cd12b16
55
2021-11-22 16:20:27
0
c56d685e3d2c61ff4c670126c9ba0829fb1afeac737c88c570ca06061d1f725a
55
2021-11-19 11:44:31
2
0818c1252eee1f002e051f2e24d72c189a293fbc2050d6072ee4929832f5ad52
56
2021-11-19 10:21:57
0
d6bd2c9dcb2d25736ee88cb1fe97b96ee92f03745211d8903865958df254f418
56
2021-11-19 05:10:51
2
3afdc738e02af4be1cbec9a5c6b4e3d4ba04817a1e1cccf297bbd1ce9a59760c
55
2021-11-18 03:05:23
2
9ba3d01d8dd7daa799ed37b706c2910e1b5f3cd5e9c538d0b7be3885c83095dd
56
2021-11-18 00:09:02
9
cb0639c784c747073237a957adf01222ac5617b4cc77f3f6859ff67298a9c347
56
2021-11-17 17:41:57
1
22bc40ba4f4bf07ac83ad9a33fc4e4741e4bc46cf6fa95ce4387407ad3506341
54
2021-11-17 17:26:17
0
081b1679d11fc87908a459033418805762c581e27c5f8fbfe8dedf4ce6ab37e3
58
2021-11-16 11:13:18
16
6059f75ada0b5dd0e5c21c2146505c49929bf2665b1fce542d7d24fc096a807d
54
2021-11-13 19:42:53
0
732532978797b8794d61e736dbe7a532970c1508d4ff887e1130bed9c38db095
50
2021-11-12 17:18:12
0
941737f0a49594cbaf967f8f10d7b008029fe8720e095b6330e651794d78b4c7
56
2021-11-12 17:17:53
0
b9b264a5eebb95b913c84ccc5c0a438166b913c4dfc2485059fd8ccd9036ec75
55
2021-11-11 15:16:01
0
49f02d08d6ea75042bd6efbf2eaed098cb324e87d2c353311141429cf202db4d
57
2021-11-05 10:17:49
7
05f51a5141a662a499277751e718b5c1d2e5ee610ead9bd9f445e4491601ca11
57
2021-11-04 19:24:01
2
829170f272801d1e4d6373add19e0365206ab4404ebe20fc8b9f911e2f9c1deb
57
2021-10-28 19:23:19
1
2496570210ffb081146f6a17d4089aab38f284d6792c686793ccc72d45f31729
57
2021-10-27 16:03:31
0
a7bea8d9ce6d1c17f1d0a4b754a0fb4adeb750c74d3045646bd1f9a3b65a3efc
58
2021-10-26 11:43:39
0
45c498aefdb829ee4c4c417d75a58da22fefe4101a656601f2610e06e1f357ef
57
2021-10-26 11:28:21
14
3abd62ca33e87d4a6d374017e677b84e419313105405719489f2d387e1494b82
57
2021-10-22 19:22:29
3
73429e85bd7b10e4cfcc01fb5e0bb9e92756bae404af496104dee8b12fe5a0cc
57
2021-10-20 13:13:04
9
44fd9ee06c1d7f55e1da1b2d34548e485a96974c2b7242b0c72b7bb45f4148e5
56
2021-10-17 21:59:08
1
656ee31bfa8e7c2b20d7429f89227e6390da7eedf9a5fb95352874061fed0ac8
58
2021-10-17 21:59:05
7
c1ede063f28646edc63079cc82b06ac63dfedb4d96504ce0c81271b74f16cc05
58
2021-10-17 21:52:42
7
82407d26c9c2ef0c26a51ab512436249ee3d05d556b436d87e155ae09b9e4f67
57
2021-10-17 21:50:26
2
578757d5329f77d9bcb2f9ab078b341114b302caddd5f6f937f0eb6aab1a8b73
57
2021-10-17 21:49:20
5
adb485d2fc0371b8c2c09cb561e07346ce0f16572452396ed215fcaebc6f0b93
56
2021-10-12 17:40:08
0
05e5ee33c4c1cb6d7972121b25e4315bafd9b037e428e3f04cefe78ba6825410
57
2021-10-03 15:26:55
0
06d30ba7c96dcaa87ac584c59748708205e813a4dffa7568c1befa52ae5f0374
61
2021-09-30 12:48:36
38
4e2f27db8cdf44902f44d5fc130ec48c88361f48bcf48b3917d2443c9e7f8727
57
2021-09-29 18:09:26
0
85d00a2e1226bba030cda6f43e687d0bf02311601a30b01ff9dc4adbbd71629f
56
2021-09-29 12:06:26
10
0aa15f9d1d822e0a013a9d78edf8a3bff9c259687b453c24c941f8552df17ddf
57
2021-09-27 02:33:28
0
683dd13dc34a44cd649a935e8577ba06272fe9dbcb6736d9a8e779e210dad0cd
57
2021-09-26 21:46:04
0
9d031e6258f1464208887e21b9d3127a606f37dbd723d99c002ae9264e09d2af
57
2021-09-25 22:20:40
5
cfd9ecfb2f37b50a415efdfd53d3dfe6449aedb6a709be72bcac07b756135f71
56
2021-09-23 15:34:46
4
096fe6041a158af3e7c7fb17972303007cb89101bfae68c3e9da05eb8902b1a8
57
2021-09-19 15:07:14
0
c66b9cfcb748d498489d4e32f57173e22370442deae2e759c5025bf70948e84f
58
2021-09-18 16:20:55
4
b05b0cfad6d32f9a56865d1e24cf02b6642892f60ad5d972b2f291484d5c7b50
62
2021-09-16 22:35:35
37
6dc4da271606c683955d063449e394cf2a088b9bd6ac14b0bd0a09766a2d47a4
58
2021-09-10 21:56:34
3
3c9e4ba1278b751c24f03ba39cb317b1bc51d2dc5173b0a0b201bc62fdc2c6fd
61
2021-09-10 13:23:59
7
a5a9acdb93ddc88fa65bde2587d99d85c6218023b63f7d5282854ac843e19788
57
2021-09-08 15:21:11
0
2e3deed13f2b358ff10c1ef5096f88a1453c0a298a7ff66e9235aa198f346a90
57
2021-09-06 13:25:46
0
233df69b7d99b9d31228446e00d2d66c9d596b42312f0186f8ec725d7e4d1970
56
2021-09-06 13:22:07
0
b59dbf1af739e72e9bab98c6cd2f699bb6ff9045f8003d0d0c23c2974b4eb1b2
56
2021-09-05 22:28:37
8
f96758ffc2899624ca6ca371a5ef1a5f3d93a9edf8b66ae4f01ecc516d10e533
56
2021-09-04 05:44:34
0
03207c8670299d503957dda5b2a31912978c6dc9810548665a31fe6ef1cd56b8
56
2021-09-03 09:42:06
10
2b6e6b66692f78f1ae6bf93d3ea1831784cae3406490bd46ab36447b056069e3
58
2021-09-03 02:37:34
10
6a2224bb384547f03f0fec8779659b75722245e2a29e52a086069836faec2fc3
58
2021-09-02 17:53:28
8
47c4e2c71e5caa2e0aeb3ed7a3f0d2c482c6acc19e82bac5d7821aa6ef9e735a
60
2021-09-02 01:27:55
6
e31adf469212c946b3305eee067eaa40ec7e00e3fd5a4d170b79994da6404e9b
60
2021-08-30 15:13:21
1
d3d263537e41dfe3336485b052252e2803846068867bd39851079e2134bb3f35
60
2021-08-30 15:12:04
0
95ebe0e603dc9ac602b19a1f0633bc6df7026b8acc247e6189fe8b72404dafab
59
2021-08-30 15:10:44
0
de940e1c8e6cde5c4b88b2c93a6f622cbbef0f2d7a439072a826a1c3c1841cb1
56
2021-08-25 05:26:43
0
fab0c8214bb21cdc8fb8cf5fade8753f17313b7138c7c7c8e3e5819a72ddf13b
57
2021-08-24 21:12:25
5
68aff69fde4c0b00c6def94df313a66c2aa6447798e86dd1b57c77fd4177cf7e
56
2021-08-24 20:27:48
2
830d7ab7ff8fcc2eec486b544aab8d9b4bde70e9f220ce58be304bdda054d29f
57
2021-08-24 20:27:47
2
fdf26258bfda4d77881e7c85e71d38af25306c3b498fa4589d5d0afb04fb162c
57
2021-08-24 20:26:41
0
1c111d67d28e4449c40f8d83d42a1c740231725383121e2fe602b9d506de4622
53
2021-08-24 19:42:56
17
fffaed285195211948981d2ce8fe2db3cb758a6f2d3fe37fdb7142a7e6e43bd7
58
2021-08-24 17:09:40
5
0f76484eaa154332c75ec8f6721f688529ccad3b1859e297a8fc3fabc662a5fe
57
2021-08-24 10:48:32
0
90d5f5639b3c0a22281e5459c5138a2ef480694331b0c1b89ef4810bec62f24c
57
2021-08-23 18:07:47
0
ba2f307f93b831c759bae33e12b5253b4c9cf33543fccdcf2107681b124d8a3b
56
2021-08-23 17:19:50
0
d0908f1c276932b2700a9671b01124bcb050c18ff9e4958bb31c9e0277501ebe
57
2021-08-22 14:08:35
0
83f9e6daddad6804f59d7abb46c346c13f9ab05fe1be629a25fda1cc65be79f6
57
2021-08-17 13:09:47
0
4865a0482aef54e9db04bbd0ccc3888315d58d692d9c5589b8a23e5ef0816809
58
2021-08-16 11:28:42
4
a721131b213c3a8fb45eebdc1e2c36f289551efaa0ec2c065ba3be0c8dd3c688
58
2021-08-16 05:12:19
5
9c7c0df7e2a7e7d7939afd71394796d56a45ce22f4b17e4dadbfd788eadb1e30
58
2021-08-16 03:04:10
4
eb76e7d7dcbab02564306b055dc530e3156924b23aad2555cb049d7fa49f387a
56
2021-08-15 17:25:52
6
7ffcd7711cb28c71d866e9a436e1f1e16244b8dfb8bc421c1a424f136061c8eb
57
2021-08-13 08:03:56
5
323a4c4765a910aafd09db7d9945f0fdfc13a603e158b0e87ac87ff516928643
57
2021-08-13 08:03:56
5
293703318fab4ad56124d37e6c93d1aecbce4c656782c40fce5d67f3b4149558
62
2021-08-13 05:21:09
16
e25529ee8b21e7feaeca25db1acef643f10021f9305e97c63cc33e9b0d2a3544
57
2021-08-04 21:22:18
2
86b13a1058dd7f41742dfb192252ac9449724c5c0a675c031602bd9f36dd49b5
62
2021-08-04 19:46:10
24
2238e6b7ab3402ce2f15eca34d66bc251f545efca5674df9269aabcd0e60151e
58
2021-08-02 15:36:49
1
32dc9630a27c8ff68d0d6afab158690fdcf921c662e510a7a48db99ca9f4b5bf
59
2021-07-31 05:44:46
7
24e7ae8c031fb04f9c725e68999ff57ba3129f7772994a0fe4516468d3122d8d
58
2021-07-30 22:06:36
0
1087552642419f8f172ed85e2bf4f1ba0758032aa487288af762eadbb3c27182
61
2021-07-30 01:32:49
0
043f5344c87a7d1c78e71f81d9c4224f97e8523256d1791b63be0c88a7cb189a
58
2021-07-24 14:24:34
4
93384c7ef1f61cc8fea2416d6b5d23037ee98417f33d28b5cd3feddc4550f3aa
57
2021-07-17 14:20:33
0
ca9d0ad8017465f5b0eab424e418617e5d1167ff14b4e5ea3d36b1cd9cc462c5
58
2021-07-16 23:03:29
0
bce5b2f29ea49f965e007764d0e55de6739c0db12d7cd1e2657b4e7c14ae200a
58
2021-07-08 11:19:43
0
f86e8e1929aa4afbb65ab550c786212e757e1c4834dc530a8d5d444dcbeaaeab
57
2021-07-07 12:59:28
5
77a2466a89ed1d83c700d313395c4d10345d6d7f3e1fd294c6eb111b218422a3
62
2021-06-29 20:25:08
28
18ef844ef2d92976c2d7ae501f472096132f6bdc0db11cc9ce870b6efc24d02b
57
2021-06-23 21:44:15
3
48edd2cd9b09de0088c34020aea0bf40e226b22d629303ecee61a19d33ef3347
58
2021-06-22 15:21:31
6
a958cbecf7cd7d93708b363c40edf431dbea055ff964f85605547904ad9f410b
58
2021-06-21 19:55:27
1
c98e71340990df0ea47efc72a806ad7f274e00e131fccfe23cc09bde2c60df06
69
2021-06-21 14:28:25
6
4faa77f2f2d513164378a5032f7dbe1b5d9dce64ac404f336c6ac7ed429d35ed
58
2021-06-19 10:27:28
3
af9e1b242f73e477df4d1ba005002af79c739ab5b7b1cf631c7db3eb95e73c85
59
2021-06-18 20:34:50
4
4f399f1063840c585459d0deed5956fc47704b042bd888523f901522d7812323
58
2021-06-15 15:15:21
4
ef873a4a4a402d991d632f1f94c385dc13a3f2ef14e23736b89173eedab800ff
58
2021-06-08 02:25:03
3

Rule Matches per Month (last 24 months)