SUSP_OBFUSC_JavaScript_Apr21_2

Rule Info

Name
SUSP_OBFUSC_JavaScript_Apr21_2
Author
Florian Roth
Description
Detects suspicious obfuscated JavaScript codes
Score
70
Reference
Internal Research
Date
2021-04-16
Minimum Yara
1.7
Rule Hash
8cba3062a2f768bd9a1f97fe562b5985
Tags
['OBFUS', 'T1027', 'SUSP']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
6
Suspicious (< 10 engines)
76
Clean (0 engines)
3

Rule Matches

Timestamp
Positives
Total
Hash
VT
2022-03-25 08:32:42
12
56
b7cbffd8575e1557bfad525371ae5a4d46719e01e13d21c0a81868d27561642b
2022-02-08 15:39:14
2
58
4b9fd0c838ad149aebca5e922454b5b1597da101f477818a5c51c313951874d8
2022-01-21 04:58:09
3
59
57767c5cdbf5e3f8dc217e5f61d75d5d5ed9869b1f188ceca7c133f86d4f6b5d
2022-01-21 04:27:12
3
58
1cde9985baaa311f6b5c1f7870392ad70265e5e3828b392477860a76622fa09a
2022-01-20 16:07:17
2
58
60f391cc5925098b46d1900defa161a4a7c0be2a54e51593924bf408b5453758
2022-01-20 06:04:35
3
58
c137c34a67eab36890c8f2fdbbc9851bf4a918385d20fb7cbab638048b72b841
2022-01-20 05:54:28
2
58
01a24afda4b482153570bcd63bcd3a9d38adbdd5ce6ed521e6a148f5259b03b4
2022-01-20 05:16:35
3
58
4270ff037b04058c046e2c2e871790923eda5fc8b5b8b755953b19e34739896a
2021-12-30 12:25:09
2
58
75db4ec5d03ab105f3a27430ab90f8d45110ca1f94279397bec93b2392d1a9c6
2021-12-03 12:47:17
2
57
a59e43e7610892cd785b985a256a7666e7dc99aee005e1edbd1c57af7a6c5b39
2021-11-16 15:59:38
2
58
88a53acfb85d4d1fa77b92438163755f1ce4c9d1cb70d6de779ed42bbad772f0
2021-11-12 15:34:03
2
57
a2820bb78c9c62c49c1217b0cb9bdb5c0cf13a9a034dc5505849339d766edc26
2021-11-03 22:10:47
2
59
e435d1792c3657b2915a0bec0f5b15e6265dcc6f0f3573b09e110f78a9677567
2021-10-01 13:25:36
0
56
ea9b3437d3aa5921ec4f7fcdc9f82fbed9c11df3f4c0c4a92d21ea189ad5019c
2021-09-14 04:19:55
1
46
d725c3dc78cd4ac8e40eddc218a6e859c7475888b0cb0cf432c6c0ff3e0ce9d9
2021-09-13 21:52:47
3
59
d9115a6ac4e61133c597ab5b9425611006a8643afbbf975afe1411f6ad4111cb
2021-09-09 12:57:13
3
59
1f24d57e30e5d95c55bf84f68cf97c5b3d772f0cf25b998bfa391a8eeb8c885e
2021-09-03 01:16:34
2
57
5725722fde984a0d9aed62616ee3c835f4164bbdde7542fb9224748b1402df15
2021-09-01 04:47:25
2
58
26773d30e1ba4562430efa8beaf538eb467cb4591e435342017c41e1c913cd1c
2021-08-31 01:40:23
3
58
fba7c60e249f1ebad1c33e299313b3c87ce8275339ee61a56a84b23d2a298037
2021-08-29 22:14:55
2
59
1c4a6f5866889e78d645c7afc4e3876d0f3f5666d305c3f4899e691ad5c628d9
2021-08-29 22:03:18
3
59
88ab3f47ac44174d1c35d8e4017c51195f37f4c49d0f8e62f4591597a4648fcb
2021-08-27 16:54:06
2
58
1974d32fc5e0c377966c66da5e8f37c1a4a06b0972405eef2292ec883418dd16
2021-08-27 16:26:40
3
58
fbbfd4080fffb52aa282c7a608c2cd15b1813e6cf7ea4f36c082e63ee20cc43c
2021-08-27 03:26:58
3
58
a13d55ed5d12a874ce3057b6ff8779b3955a89c9f693068a2fc365e29a0c2193
2021-08-27 03:24:45
3
58
c7ed77875ad304f1acb122220cc37f382d225a40d507154d631860fbbb429866
2021-08-27 03:22:35
2
58
24802121022581ab511605a10a86681af6b16549de30d5dc94279b487f1bff7a
2021-08-27 03:21:30
3
58
42a0b5159799999b7926bcd991991e01b9684353428e64fa45b644a6764b1944
2021-08-27 03:17:08
3
58
e85260002718d45d0d8473ae74aa80fa0f110a679011d63cff2aacccf88a2ad9
2021-08-27 03:16:05
3
57
c7d68782890704a813b3b69bc399b7ce62b4e06a0bcb2babeb6dec650db2797b
2021-08-27 03:13:59
3
58
74d6f9ae543f1e01e46997e74f568d0bda9c369e6104dcb356ebc86e3ec56eb1
2021-08-26 22:32:11
2
58
a811c771d746b3c66089bab36a22068b1c2e42cd1ebd5419fd6021d0103478fc
2021-08-26 22:22:25
2
59
626acd23bfc272e83735d8b6203ed8a7265e27d961a9738c07a6264244f397b4
2021-08-26 21:59:29
3
59
9968112bdf8c2c637376b7127b7b37248d3dd561fbf86fe0e20feb70eb93b690
2021-08-26 21:58:24
3
59
bf667c1759d3b51e8525c77796f853faabb1800feede9a23c705a8a56243ad88
2021-08-26 21:57:18
3
59
6e1ba319208a12f7ae72a7ad48b890c14d92a9b1f92c638dee2fa7fcaa6d7f53
2021-08-26 21:56:12
4
59
637f5aa24e3f087946337a00c92fed8c88d346077002cbb82925b1023c7ee210
2021-08-26 21:55:05
4
59
dd613bcd33a4f768af7f75259f65d475d2fdd88c8ae25ad5ba60ccba9af8d43f
2021-08-26 21:51:50
4
59
5aa6adf4bbe0854bad1356f8dccd4197e70276f39911ab17cdda7751ad9d62ff
2021-08-26 21:50:47
3
59
ad8307e8105810a012549a25e1ffa7577c4af0f7b6c5dace3725047b553e28fc
2021-08-26 21:49:37
3
59
885802dd96f5ea622c71ddeaf2a6d7c776b87958cb9a621adf917c72cec91582
2021-07-30 18:09:08
4
59
6562f9aeac443963ab6de24dbe4e9437ac46fb45948c1b6ae9522df470be7330
2021-07-30 09:21:15
3
59
3a4329068de338e6343fdd34148646cc55f414ebf7bb9ca778fc54991c9770af
2021-07-30 02:45:51
4
59
5b1633c6629ef06d6fc9693ac0b71549554ddfc9246eec44b62ce25a027f6b16
2021-07-30 02:44:47
3
55
d8b0a68b52016d0ca01a8793bdc5953651cc6d617962a7757c2f46587378a80f
2021-07-30 02:44:47
4
59
6a59a5e04fb87afdde91a51babe2c6e624bc524dbd114d4961b7f3f50226a9bb
2021-07-30 02:44:46
3
59
028729598e0dddbb1555c9b49eab9b08a8ff877f5c22950b5ab52a4a2a1db530
2021-07-29 23:11:31
4
59
ea0c12620162ae9c5e46cca109460c46b747830945a5f4c1ea423849855cc680
2021-07-29 22:24:19
4
59
d646145913c1ddd5ff34d1c9a2fa326f143a3b024008fb591bd24209f87c5c99
2021-07-29 19:06:05
3
60
0306b0b79a85711605bbbfac62ac7d040a556aa7ac9fe58d22ea2e00d51b521a
2021-07-29 19:02:41
4
60
4e80fa124865445719e66d917defd9c8ed3bd436162e3fbc180a12584d372442
2021-07-29 19:02:34
3
60
6a348a5b13335e453ac34b0ed87e37a153c76a5be528a4ef4b67e988aaf03533
2021-07-29 19:01:25
3
60
419da91566a7b1e5720792409301fa772d9abf24dfc3ddde582888112f12937a
2021-07-22 15:07:44
3
59
0e13cf8d7e5c513c2f45be0ad940d372c852610a7c2185b25736623edf5494e1
2021-07-22 10:21:44
3
58
5ef0d29053e6abee847a46b84ea595e51de6f555f8c61715008ed93e588dbd16
2021-07-22 04:04:03
3
60
c58e22d345daac2a8ed6816cc6d0406dc7b49ef89fa8a355d508b0cee8810618
2021-07-11 15:16:00
5
60
a5e19b0767e313ef541a4b72e182cb49565837843a4310f6e8ed52b600136d91
2021-07-01 23:45:42
2
47
4984dd4385d798ab8d47c08bc2bf6a1d2d452f8945340c32a18ea723d8d4df5a
2021-07-01 12:40:22
5
59
6e7090be336786d7960c706545e6125f1d0a77afb906f3dfc644a5dff0c5f5f3
2021-06-30 23:20:32
2
60
604b8e3c0f6fc36543faf9ed20198e884a4ae9893e00dd4e13a0a386fb92c701
2021-06-29 20:39:11
5
59
da3bef92a6b06dd16d38436d3324a73a99c275253d7c049dece5b529a8365bbe
2021-06-29 13:50:18
3
58
803ffac092fe9cd6d163ee04c3dc091fa6b09bfd62a9b9a88c6e1cdadc8c7c3b
2021-06-28 17:30:49
3
59
66cf07266b799e438812a611fcfd4942383fce595c27965cde3ce25270eea757
2021-06-27 00:31:07
3
60
6a0d519e39c2cb2e1e7bd4fb504da725a6dfa65663656d418331a681eabe5b43
2021-06-26 13:34:17
4
60
a5a2eec34799f3c56d3cc99a8a3369c50d2172aa12e0370cd77343bc8eca9ac1
2021-06-26 13:29:33
4
59
6b087e3e5f56805990c44a60af1648a8a2dff4cc4d968428de0ce75da846f95c
2021-06-24 20:17:04
3
59
6f5b67da4a7892cd6aa5892fd349dbb6267874bdeda6f19cc491e483f0e75352
2021-06-23 18:14:44
3
59
3216861e74fdfcb05c1a0a57caea01f0b9ae0a9c864bbc92f2c2e26ee9854f96
2021-06-13 21:40:23
3
60
84623319b1a8123ba9268c50d9243424a09e5d7a309e98cdb122717bae6d748f
2021-06-12 23:18:45
2
59
9b734c73b266b72785669b22a7e3486c94a1b8a9f27628c1a1a5dbfe0456d32b
2021-06-11 14:15:14
3
60
a1af637b6b2d75cc4d2e1421b36ab171d956d83a18e403673da9bd2fbbe2d59f
2021-06-04 12:10:56
1
59
8cee10a15dfce9dd2f88ec605d8ba436ec3a304b80068974349bdb3cc1499507
2021-06-04 12:04:24
10
59
8a23bf2eab6f824ff3707ca15d47ee7e7b87280ba5705e423b6c4a9f02e43cee
2021-06-04 12:03:13
2
59
8b36223c7c1638be873dca4094cc79eee7f07e2ebb9a2d3815251053e4642e5a
2021-06-02 22:27:59
2
59
58830c115f829988607c8dc4a0ca1f5c46dd419357bcda9d4e98c022bf2fc55b
2021-05-17 04:13:59
1
59
5d8a8d5ea117330a48ab54b503b3a9e2c3c20245515d63c9033272df471558eb
2021-04-29 19:19:54
9
58
c87595b813314a15012efb56f5961d5d4864aee2a21ef7f53157df4decc3baec
2021-04-29 13:57:33
9
56
958685643b29c58ec31ca7c2e6ca144ec8bfc946bd7b73a27979ec5a6439fe40
2021-04-29 01:17:22
1
59
49758a15c5b996cdb4d88408044166a51078e07c55ed037382e63dee4d382d22
2021-04-23 12:45:21
11
57
8fc8419bb10320b098ad9c99c81b07e46547b074ef23f636502b1146d5882735
2021-04-23 12:11:53
0
59
861c25295ba1ba51ba29401941723d994e91129e28cc95ecc622fb1596d04474
2021-04-23 05:43:18
11
58
3a39ca4f276dbdd70893c69a5bfa0319561212241f688629f09183815af18192
2021-04-22 10:46:00
10
57
f17e49de47f314e6ceae2160d5b7d551dace4859c846adffc2bc638ac3a31f12
2021-04-18 12:05:23
0
58
c528b2aba68f36a565fd9e5f7cc1398cf84768b580e5d228cf84af22f0be3722
2021-04-16 19:56:14
14
49
333e9b31ae4d5dabb73f9da2207488863db90db4db494f93d9881552df8674e2

Rule Matches per Month (last 24 months)