SUSP_OBFUSC_Wordpress_Plugin_Oct26

Rule Info

Name
SUSP_OBFUSC_Wordpress_Plugin_Oct26
Author
X__Junior
Description
Detects obfuscated Wordpress plugin
Score
70
Reference
Internal Research
Date
2026-10-05
Minimum Yara
3.5.0
Rule Hash
0f3591c733ad97301c0804f4dc07f408
Tags
['SUSP', 'T1027', 'OBFUS']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
4
Suspicious (< 10 engines)
0
Clean (0 engines)
9

Rule Matches

Timestamp
Positives
Total
Hash
VT
2026-10-28 04:15:58
13
56
53371084bb1f341b38bf20dca934710d9ab642890a50f599564096008cea8bf7
2026-10-28 04:15:38
12
61
75f218904393f6982671178534f4bb5c03a031f697db9f5255729e85dcfc1bed
2026-10-27 03:24:51
0
61
4c55780fd104063a0e17d86e515df1c3296fb0a6e6c04a598c4d119cbf50212b
2026-10-27 02:56:07
0
61
3e456523d2fb1c9e01e7c1e0956fd18089a05af35f543f24c4f151abbbf7e726
2026-10-21 09:39:34
0
62
09f2c8ab3ad8537eb73937a406d1781a1dc69c15f2c332606e548dd605718e31
2026-10-14 16:30:56
19
55
b369f15362094eb251a87fdc2099945cd0da200750f1eae1bcd5a376062a6149
2026-10-14 14:33:44
13
61
f6429f1bb4e914adebde5405ce3245fa22503c2a05fb881e334ff629d51c9eb2
2026-10-14 14:24:06
0
62
5fc032507cad727967f871ba06a42817024f43a65b71b11c7c180a5caf5a1a24
2026-10-14 14:17:27
0
62
6d765cf3a0fd16e971e5e29c47117b9fe187dfbeda6821968fe109ae1eaca0a0
2026-10-14 14:17:27
0
62
11efcd50f7a728bf282ec187973d2ee8c77d038fda245c07b94042135439de46
2026-10-14 14:17:26
0
62
962a80addef9f841174e70b1e7a26e50a4b4a3c618815e2e9036643016378175
2026-10-14 14:17:26
0
62
a71a90525df57a447902a5af351eb3eeaf109c17588d20dc2ebdedc51779b175
2026-10-14 12:33:36
0
62
5c077487c2e4362fe950ab75bb2bb75fd15e5a70c452af24d2d7ef0ec60bdd15

Rule Matches per Month (last 24 months)