SUSP_OBFUSC_LUA_Mar22_1

Rule Info

Minimum Yara
1.7
Tags
['OBFUS', 'T1027', 'SUSP']
Name
SUSP_OBFUSC_LUA_Mar22_1
Description
Detects suspicious obfuscated LUA scripts
Rule Hash
da7dd21df09ceebc21b067635562aebc
Score
60
Required Modules
[]
Author
Florian Roth
Date
2022-03-02
Av Ratio
3.1

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
7
Suspicious (< 10 engines)
3
Clean (0 engines)
97

Rule Matches

Timestamp
Positives
Total
Hash
VT
2022-09-29 17:32:33
0
60
94674cd35c8744d5b5389cc6f41d16ae4c26660d2f3db2fa330ceff442d2eb33
2022-09-28 18:17:35
0
60
490b42962ce2a4e106cf3649d87d0158f1f6b51954d99671f964cf46238878ff
2022-09-25 21:23:00
0
60
71c419fb68129d373f856e6d3c5468134177a6bf6f6f322dc8179c7f5461bf3d
2022-09-23 19:50:08
0
60
42868abd219d83e1b9c8b1b9e8bfdc7084e7c93cb2e074d91ee69d4a74d1a0eb
2022-09-22 07:31:23
0
59
ba5e8530cffd4400f34dcc50b126590f1b1dbb940848e55862f67c4f0e1ba221
2022-09-20 21:18:02
31
71
c02634cbe15a5858ef3dff5ca797f8c51d6b7847459ebf1649862dad3dd42be0
2022-09-20 21:05:28
30
71
d7e7278f988c882baff0fcebe61a2e12d091517f119b848b87b2263bd276afe1
2022-09-20 21:01:49
0
59
0152e3ca0f0e8ce57542fe21894f02c221eba306fd57dd72c41beea5d3cce3fc
2022-09-18 18:10:51
0
58
fdbb2cb75a3cbfd05b0d4fb77bfcf4e638e251752b2c8c166445b5a2855ce896
2022-09-18 07:15:43
0
59
8869707c0878d829cb48ec7ff062d4d3cb2134c259431542b2c31f7a23413f26
2022-09-18 06:16:43
0
59
167eb4a67a551b5c5074478984b0eff510bc6ac4eeb332ef512eb6aaf76e7381
2022-09-17 15:31:01
0
59
d4fdd2fa76e6dab284d538c5d5870d7d331b5c8f25564c6adb25f10efa1bb19a
2022-09-17 11:52:46
0
59
1666831c29467f5f2f7b4ed686ea1d8ded069024ffa4522c4cd450e51ef3b139
2022-09-16 18:35:24
0
59
1d4668b5b2b4a4c085189362fbdd52fbd3542f2fddf19dbbf15b2d8d95c2fd27
2022-09-16 03:20:31
0
59
b3f174b665199e4ab446568ea9f77ea5ca5c67ce0b60c313ad92d0acfbba8b8b
2022-09-13 23:11:59
0
58
b5d2910a325bcca69ce5cd21c12c65c5836d9d09f0534acccf5be37e454add52
2022-09-10 15:14:02
0
59
7d929e6f36e8e07b047d885aee94e6a0ac57b680e8624e2d4ef2dae68f73089e
2022-09-09 16:31:25
0
59
81bbfe4361c79e6a9103c70f6a3903cf81093aae964b6501357d53231a22b65b
2022-09-07 21:40:09
0
59
7996f01ae68aa4ff2fa87094d550786870184d0c27f8f84726fda395d476c7eb
2022-09-07 18:39:01
0
59
236f8e8297ec0d5bf037c2914fae1bace82dd90590255d25f8a15039f71aa53c
2022-09-06 22:29:38
1
61
93b8a981091e130f7711681f46a4f8c391a0715e066edfda877987278d5314b6
2022-09-04 20:15:17
0
59
290641ea4258adbfe03de27342a900c3b845722a2655f7b8236934f16c832d8f
2022-09-03 10:07:26
0
59
e6b7c4b6d27f6f19cb5b346fc5600821a73edd29730f9a6d82d5e74e410a5199
2022-09-02 12:17:50
0
58
03d403862784131414bf569418861c5841fe8928a8d93e7ac0a57fe6de3a7caf
2022-09-02 04:13:01
0
58
ba74c126b8a07e217f13ea3d6b9fdcbab6a926d6ccf70e8f0a003af0f50d33f5
2022-09-01 23:22:56
0
58
56a2998453fb790feb617f6c320fe733abb734eceb344f73f9b61548fc2202d5
2022-09-01 18:59:37
0
58
23105684f7ae43b1310110ba902aff495fc9166bd33059374aebececcef30154
2022-08-31 22:19:56
0
58
fc976c34cad195f5779a766cf8990c8220eda45369ebd4b8791e98ee6dd5327e
2022-08-31 06:17:42
0
58
607a5dfe1840a4da06d287ced23b337c8e3cbdbd50f1cdd15be64a76b8a304c9
2022-08-30 16:15:06
0
58
88f18b2588c9dfaf84b14e157c226798a625c9abd91b1d5aaf996ff496c41a77
2022-08-29 10:23:24
0
57
cad5c86ad4fbb3acc0e5c585e85d7e3dd6064280b73c051a00e16ccb898cf118
2022-08-28 08:45:37
0
59
f2e11d5528ba271391c5c49a60a2a51db05a5dc167ddefac437020141458cad0
2022-08-27 18:53:30
0
59
dc1edea3cc47f022f5817123a45870139ed06ecc36d7f3c39fa62c7a21a548ea
2022-08-26 17:41:15
0
59
c31f7b325cc6c868ba6b68e42110b6861f83cde0bfccfa62e6eb936f4624d39c
2022-08-25 16:31:12
0
59
9074d7ff5260cc9e2425a37a15cb294347877625cefb5687f6982feaca8cb946
2022-08-25 02:24:27
0
59
89ccbb0b0390c0100f0f34fa32a8d949f41b0808217415fd14c8c9f7ee0d5650
2022-08-24 17:19:42
0
59
00545a3de6b320b59bb94b09fca6841e1518f3bf3ed644bddb8de1072b40548f
2022-08-24 05:37:05
0
59
02be1ed3670d4ddbc757165b7f0ca08477a3022a5faf2ba641e945a910b5fc65
2022-08-23 08:49:31
0
59
4f59c46fcba7ef1f73014234652cb9aeaad96d9e2f5c25b6a22c88f1359551d6
2022-08-23 07:33:39
0
59
10341987ebe81c7cba95ff95a74c62c9c479059713b5917b3ef1deeade1196b8
2022-08-23 04:11:13
0
59
28ea58f9c3afd7589f3ec8cb0c0878e527ae9948cd18aa1ad02a62e6d30c97aa
2022-08-22 19:38:15
0
58
c8799a8a89e0f784fdedc5684ede626fa7999f5e427c2687a24fef518d56fb26
2022-08-21 01:07:13
0
59
19156e4b265754c5c25d985c3b8f4ce141d380458d50af8f2c681472aaee7681
2022-08-21 00:09:36
0
59
9076487cb5dc63338116d5b76b6bbc4bbc321bc173fe44ca6dec2b02cfd50ead
2022-08-20 08:24:10
0
59
022fb90d490da47e0ecba99172939daa81c54ca71e714502fd6433c24895d26a
2022-08-20 07:17:49
0
59
55c7b3fbb411a1a9b7bb484a2a2b288e6812f29108f20b71aae305f4cf7551ef
2022-08-19 22:07:50
0
59
7455ca5532c015be206d8e495e1110a766e982098b1ad528faf5c52a565cf42c
2022-06-21 16:24:27
0
56
33f9c45f7d69a894fb6f3177df0de60522937189caa590dff4ecbb043bc0cbdf
2022-06-18 08:52:45
0
56
a4681a2df803d7a554f89156f45db9fac29f97f3ceb1bad65d90b6c14598c29d
2022-06-17 18:43:31
0
56
4327a7e2e82ee6285eb1a61c4c56510addab12183c0f721418ca7ff91a148266
2022-06-17 01:28:04
0
56
70283758bab456a38b2202005f3047586b22529e33a211ef7f32f071caa0330f
2022-06-16 14:52:31
0
52
32b3ef8c75af69e32030d2c575bb151bd0e944063cd7677b32858d18e6cdcea4
2022-06-12 16:18:21
0
56
e4f159b8607b73ea9870ee5216fcc3e9e80aa5defa1a0875d3a418d895ee303a
2022-06-10 21:01:36
0
55
0b28c3af164fc2349d964df197c001ffbff42f9036a1cefaa63a5cd9fcec27e3
2022-06-05 19:11:34
0
56
a7b686b959fd9602fd7929d3c98d5546ca1d01e86048ae41461dde0c5bb498ce
2022-06-05 11:42:51
0
56
0b8f244efe902816b3087d42df81740b5b455b4134ea5d42ee1d1632c5655b00
2022-06-04 20:36:00
0
55
fac8bd81ae5d324757036b3360816bd9f992ce39372a7e99b8a6f038b5fef84d
2022-06-02 01:51:51
0
56
2ee69620948e941b45c3360c6318892f1e1df45860164f124c4ac8be6fb8c30e
2022-06-01 18:51:09
43
69
f14f574fb5ef1c9ed5aa18a74480bcccb39230a789518ad464f45f72d3b6fa9c
2022-06-01 17:07:39
0
57
20282685ce36db159f29fca20acec3064b2b8ca3079b94fbec21bfde741ff15a
2022-05-29 23:12:02
0
57
dcd3617e6dc535d02728c614089680d81e40ccda10ff87c3e7e1a9af08abcba6
2022-05-27 23:45:32
28
67
ce8c5b5e413551a99267ce2ba5e3757b2b3b2841d05eb89505744308fff9096b
2022-05-27 23:44:19
0
57
1282156bea7997db4dc7a61a180f382f1de0001efa74e24b4374fa541f5e3e03
2022-05-25 16:47:52
0
56
cccfb7f6a4fb37ab738e9829a7dce2941358316f7c217b28bd79c06e4353ca1c
2022-05-22 04:33:32
0
57
ea2289e65ee9e72fc7e09cf4468e9bb6f94b911abe54472a5441361274a4f544
2022-05-13 19:29:01
32
68
3cb8f984d319ce74336595eb3daa5a41457ea39ec0481584ad9ce419cf952040
2022-05-13 15:00:31
0
57
d097f06a082f965590a5b322970eadfe9ae3f5cd00df65528ecc14995113331d
2022-05-11 21:14:44
0
60
5430d4d5f7aa818ec8de959a347895dcaa70a15440e2ed06508170a92671d3dc
2022-05-09 17:01:50
0
57
4621e3077881959fcc1eb16fe3465732887b20a48637faa7cbf12d63bd25e7bc
2022-05-06 21:54:58
0
58
5cc75fc0cb2c7929072a0b7d2acdc97442c447b719615f1e499dae620369ce90
2022-05-06 20:04:34
0
58
09846f23d7388862187dcc88a4a5fe37b3545bed02bd2db24bdb0e023cb74e98
2022-05-05 02:41:32
0
58
37d6eb339a6397c40e9dccb216198bb84cb3428e775294d051da030e4207b92c
2022-05-02 02:19:18
0
58
4ed431bb6a7fb923496b8a3c05a8c57fceebc4869773327fd07874a20cdc1d1d
2022-04-29 10:17:46
0
57
a0d9b807d36007cfc3931b3e7415132bd88dbae9d53236a6b2165cb3a85ae0a3
2022-04-24 20:17:29
0
58
697e9ec5cdbb864ed56d1aad59f673733452ef6627e657b6fe2aadc477c10e52
2022-04-24 20:16:25
0
58
7abcf5ec1095f3cd9af3a218bbdbbe6b7baeaad47a07169c18b408daa1707e88
2022-04-24 19:28:33
0
58
cda782edbc27b4f29864eaf055b6a6da200bddd30327886671af4eb404d5bcd2
2022-04-23 04:02:28
0
58
f911e2acc400a75448591fc4786804f56644a7ad70d54a4bb5190d9a4a0cef4d
2022-04-20 23:14:34
0
57
328c0a5f03848d1d180744adf95b30f6288a14452c8a4e4b16090d202b07b328
2022-04-19 12:11:32
0
57
7387c515dcd23a64480155ce96127fa0036b29ad7296e653bca5ce8b291a5fdc
2022-04-18 22:56:58
0
58
42e04d927d238045d09d5964c82ea3eece101a0dfad154449c71a07c52e0aca8
2022-04-18 15:12:46
0
58
cef8e630a940f6eb5cfebba7faeda3fe11a63bb489b54fc355f65aaf5ae13111
2022-04-17 19:33:29
0
58
9c4058b1aa748ae3d90ff5f2f787407d7af6a9e9f340396e643622783fb3f7c2
2022-04-09 15:53:39
0
57
518be0e48e17ecd9051f11ab79fe7d3e7f7ce3c7e9d0dea9d6a71c86c40ff094
2022-04-06 20:01:29
0
56
f27c79b2dfd38e6f7a58e5d8685daebf2556254f29b22e6d046a6eb430b7b16e
2022-04-03 09:55:45
0
56
927414eff61f80b1422df7c1dfb329894b4166207652f7f581f1215849f934fe
2022-03-31 12:09:52
0
57
7b74ea069adda0a1ed49218f8085eaf47c93be62d0f1229ba0bf3fb9f965aae5
2022-03-31 02:11:57
0
57
c29392a89bf1d807d20b4cebb05d15fe9c31a595a86ab89221c66493434fccdc
2022-03-26 15:45:46
0
56
cfbdd2c03bb5e0cda9f6999893af33a23ef586b59df2874aeadbf997efb3e958
2022-03-23 22:07:21
0
56
05eb3792c3e642edb3adde5861b234e584e6ca5d585c9c5c43e57fea2dde13e2
2022-03-22 14:55:54
3
58
263a5c8e205c9200d0444d2a48a0f9dd26918c06c7444529c2d2ff9a4a8f311e
2022-03-22 11:07:48
3
56
6f26b6ad772183699ecafd488a61419a704dd95ddb53ffa491674c7336af840a
2022-03-19 19:06:50
0
59
79df6c679ed22b3f782615e21dea068d86a0530fd38ebabd3c245426f82441e9
2022-03-18 20:19:08
0
55
24e551401702822ca980589c190ce23335b47269a7e595c299025b00e5e593d5
2022-03-17 21:41:02
0
55
556dea8f2fbd69ed7ea7c28762a80e660373e7fe650b6bc2047f4661c0444f3e
2022-03-17 03:18:01
0
55
4cc2037d6a1d7a448b708c4346668007d1fe375be7da1c63b2099ea8c7cb89b8
2022-03-15 16:26:17
0
55
af8545c937852bafd8bfc744983032dd2687b871d79ab77febf318bf088f9da8
2022-03-12 22:33:51
0
55
adc953a9209d4947d3f4d52d3b8dadbf758fdd9a3996e80acdd4499084f3c7ea
2022-03-11 20:24:29
0
54
e7965e6b5467928819998110cced68e33088d68af4cac0d9a0cd364e5f1efcce
2022-03-11 17:30:02
0
54
21e8056f5bdbf02333e37a7a28e67a0927cea838b168c2597ae845001c6cdbe9
2022-03-10 20:27:02
0
54
64785119619b74fc50981890c5efad1667a9581f21aef1ea4b7db865ad17e979
2022-03-08 08:16:20
0
56
2db2e139fe786ae552b1b93eaff935d064028e5295222574428a819cba1bd241
2022-03-07 19:20:42
0
56
c80b885317bd6514d145e63c06a3e7a51891e186be38399d81dbcd7768fe9a8e
2022-03-07 12:21:00
0
56
fad9cbaf351ec326d5d6c2de0e8452c2d31241ac7e099d55afe47dd26a1eef61
2022-03-07 02:32:48
0
56
b1bbecec6916c3a6a0c91d77984f639a68a7b7d97c1a772fa7e62fd6dc7f23cc
2022-03-02 19:48:40
26
58
31d765deae26fb5cb506635754c700c57f9bd0fc643a622dc0911c42bf93d18f
2022-03-02 19:48:39
22
58
7bf33b494c70bd0a0a865b5fbcee0c58fa9274b8741b03695b45998bcd459328

Rule Matches per Month (last 24 months)