SUSP_PE_OK_RU_URL_Jun23

Rule Info

Name
SUSP_PE_OK_RU_URL_Jun23
Author
Florian Roth
Description
Detects suspicious reference to https://ok.ru/ in PE files
Score
60
Date
2023-06-03
Minimum Yara
1.7
Rule Hash
85079631f454f19bae4871ca96a03c3f
Tags
['FILE', 'RUSSIA', 'EXE', 'SUSP']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
7
Suspicious (< 10 engines)
55
Clean (0 engines)
46

Rule Matches

Timestamp
Positives
Total
Hash
VT
2023-09-27 13:00:37
0
71
2b7c121d41d33eaf326f25bf30565f020eb89dabf7c714a5c57ef6a7c22fda3f
2023-09-27 13:00:37
0
71
8a630d1d9c394c1e250b169409548c410b078d8cb2ce7b210dcec66e460366f1
2023-09-27 13:00:37
0
71
98f7500283915fe3b247f0f8551e0e580acc1834e5fa948baee63ab1c7b9ebde
2023-09-27 00:01:43
2
71
e7aaf562d252e563c04e249cb27c5f9b5c79abde10ce5e65aedb9d58f6db0207
2023-09-26 22:09:59
0
70
bb0f1283e9be464e402ef15deefb7173d45b8cf587263e82e52632fc3a3f40b2
2023-09-24 02:15:05
2
71
5ad777218a8c8b5036293ef97f3a40473ab1bf10b701472a7bb1d5bac1be0777
2023-09-23 19:37:49
0
70
d8137a8e21bcba5d7d9a07fc9d57450889d9198ed5463f74984550fa0efedf7e
2023-09-23 19:37:49
0
70
6beec73411bb8bf611ee01d3112fa0e2904c7b9c5ba5df24d6d8ba77fdb87aa5
2023-09-23 19:37:49
0
70
d4ef72f602f948352d37f3bed49bda438b226aa6a7eb18b466474a9e100e9b2a
2023-09-23 14:53:21
3
71
2264b35b7b4c4187b7271a120dca8b7db2437d326c2eb18417bc402a9e20ed21
2023-09-23 02:18:13
1
69
3ccfddd86ae6129fd8190dfc6860fe2679d193262e6f5f94d469b2883af46934
2023-09-21 02:01:14
4
71
3a344ab6fbaf58b7af95de9e23255530e137895ab1135e839df1f495d2842ddc
2023-09-21 01:54:54
2
71
03cbe2584e39e25f1ba18cae3c89e9888b679c3fa781dd8c70140ff7f3073b67
2023-09-20 01:30:24
5
70
c9b01d47deb58ada87ec51a3b931179b8f12189e0fceec2ab21dc7dcaeec4dbc
2023-09-19 01:46:12
3
71
1297984a2e87a8eebe5998edeb9741a2a709a9142ba802efe4e99ccc9c3d0860
2023-09-18 22:56:12
7
71
ec45828eefe2b4d7b2986ffeab7ee3fe16450654b56cd5b42cdbaf07eb12ef0a
2023-09-18 22:56:11
7
71
373dccffcbfbea25cead4540b5144b7bb54d6050f7946b7bd9aef591a8ef5168
2023-09-18 22:56:08
7
71
3e52594ff3befd63c1d32b061b22516ed47a38bde80cb530ea6f360eecc08bf3
2023-09-18 22:49:49
6
71
4e5af52d08a0556e7fdec8d3b3a7aa1f9dfa5f5434d13919cc5efbd0f026b7fc
2023-09-15 01:59:01
5
70
35933f6d02fc73eef0cab35cbd524afd47312ac10cf4732a23d24e3a1b0d41da
2023-09-14 13:50:17
1
69
bfefbdd730476b807a1ed88e6eb53d50535f6ba389a61b054363ff49929d7121
2023-09-14 12:07:13
0
70
249a0ae4884f9bb87ee4fde12625c5543823b01f0e50ee78a176e64407523f76
2023-09-14 12:07:13
0
70
aa9922897537213e20196087e45ed754ef1e88a9695439a487189318db43fd88
2023-09-12 19:35:31
1
69
82e39d37fcfcecfaa2ae368d1de208fd286ac7aeb896369c5fa53e2eaf48cb2f
2023-09-12 19:35:24
2
71
44c3ec313e2a4d875c7d42ca1c1eba7a7868df1f8b115356133363f58f9e6b9b
2023-09-10 02:11:22
2
69
c35e9f3fa92e244b9f1f5641b84fd0520eea058e3e2d6ac6cbba8ec88bc482ea
2023-09-09 20:33:12
7
72
db3b491edbd1209d80798d652587d8b03fc720576dc733d9074160dc30ad8a85
2023-09-08 16:36:47
0
70
86d1e7cc95900078f3572a601ce9653f8b6d07ae49c23889ff5543ddf4c984ac
2023-09-08 16:36:42
0
70
6b98cd1cc2490193dd61c0e717bfd8d364df07e061ca53b442d40071ed5205fa
2023-09-08 16:36:39
0
70
543dfbaa1b1afa6e466b8c1b7525669eb2e44a8ed0a8bf91532c8efedfc5c16b
2023-09-07 01:53:59
2
71
3a9e6e92ca8197eb765c216d7e2e6ee8775d8bb1d8e241a343da6fd7649792ad
2023-09-04 12:32:16
13
71
15f20c583707df1fdc402a10ee6f7c24c3ead15ac194e04b29df0d6f20b06af0
2023-09-02 03:10:06
0
64
a5608f62d5ee98263f0999168ece01296c703722adf0a266029fad23b8260a2a
2023-08-31 02:34:53
0
69
628e584dbade21017dd87c70305e586fd8d348c944a42185177c1732019569ff
2023-08-31 02:25:32
2
70
328ac9ecf9a45cc093f5377995b41903065a34ee4b296851d3f13e4779b23a8b
2023-08-30 01:58:18
2
71
fe77d1f22ec613f87d93a5b33867ebe16b5487fe81a6c8d5a179f358d7f7ab4c
2023-08-27 02:34:25
1
71
f3735fad046cc465d005bf8e8e58285764af51c5ecb98725376fe333e1b41230
2023-08-27 02:00:36
2
71
7587beccee459d5d3a0aeaf02c59767b24e0fe7ce8636a56d9170c28c1db1a8c
2023-08-22 09:34:52
0
63
564826bd8529470e0a869b950c0396e8cf741557db792953f530afe63f2633ca
2023-08-18 13:45:35
0
67
f44eb2e5b91ae13d4cfe28b8c2ada2396c0e553569f542708025031df1af17e0
2023-08-15 02:28:22
2
70
e28cca43642d94c82ebb3898898d8ad7c999b24fe9cd2542d27737dbf7b714d0
2023-08-14 09:07:59
0
64
411284cbd628eb7225ee4e7e59d1044f3a06b07fc1381335fdb1d4b2eb590d3b
2023-08-14 09:07:59
0
70
a5b60f376fd1a02b20c79ac21919104c7e05f66f839a1fd5360ae8e25efd5b1e
2023-08-13 23:03:59
0
70
69164c9a297740a4690ddc3fc335372d8627c877d32e0c43ed52a2c82f725277
2023-08-12 02:39:00
4
70
b090efed51ad8d903d0da59ce215d915f7fc5e7c15dc1a057a207eca8973469c
2023-08-10 02:19:18
3
70
1aa225f729d02a84dcff7a926c8a04803bb2251ea247cccb8a143475dbeec5b2
2023-08-09 11:43:07
3
71
32f80dae03280ffa606a2f4d73970979b27789abe277162685a45b7ec9a4400b
2023-08-09 07:01:41
1
69
dfcd7cdf784c093b00c329b9ac000191868b74c4044cf3a3b8c50a3d78a7537b
2023-08-09 07:01:36
2
71
7adbc3306064d7aa1a2c70faa553d7bef6439e00493fbd534d7b17df39932855
2023-08-04 13:48:07
0
67
61b72eeb1b042914c3c3ada177f64587aec04d3d58be8f87c96dfcfe7b2c705d
2023-08-04 13:48:07
0
67
06b11a37ae01212ab8b8f3c5d86de671c5605584f387a8a40c6084a0cddf488b
2023-08-04 13:48:03
0
67
31ec20b3d38175b1d3e13eeff9c2ac5ee6650fe5cbb044f59276c06dca182d5e
2023-08-04 12:13:06
1
70
e5f6efccea9831ed0d480f5683fe10cc09ccafc5203f0ab7381c8f4b45176161
2023-08-04 12:13:06
2
69
0087484c144e2e1d1cd7bc31371b0f003bbb6d36ac4f18c57c030d5a0b6a40fd
2023-08-03 22:07:25
0
69
eda9800e5336ad5d801a06e3915929bc352c97b6748662ad87babb5e9bed726d
2023-08-03 11:10:15
0
71
f981eb1c486f77c1de7bf6f8229960ff0f111dea4cf40087ac956170628b0165
2023-08-02 10:19:15
0
71
f0386c12c8ac0f15137a12b324b65648d543acfd2a314e39b462123460631125
2023-08-02 01:22:28
0
70
f1965d883ee77aef3128e186fca9944ded507493c1e2f4824f6a32e96d2ae176
2023-08-01 22:05:19
0
70
f26e1103fe5da044aa58731774019ee72e67b86750440126478829f5a89dfb58
2023-08-01 22:05:19
0
69
b5db8e924ffc0fe5ed608e028e10bdf8a320704f57f2ae8063fd22f6171987dc
2023-08-01 22:05:19
0
70
80b5aaa2a221595a25d2d03dcc6b6b71da324a34d409509b8dbf1b2ff6a75def
2023-08-01 12:08:06
0
65
ee637fc12b262dbd54a2c813f8adc59da9b9ab105ff4e1de7bbb5a4835464eab
2023-07-31 05:01:03
3
70
7bedefa1c2e63222abac2122e61ce85469118d51e11e8ae004f8c9202b9e845f
2023-07-30 15:49:21
1
69
c0d00dfd34bac89e78aa983b6d925b1a9c6eff4d829e2bd2407b941e0a13637d
2023-07-30 15:47:56
2
70
e087a1fb782c4b743a5eb6193e82ce784675a5fb5be5a0fb358981a59ee19d00
2023-07-30 06:10:05
3
71
5497a4db7597d70cb51b09d04831f198840870f8608bade9b505edd2f78df8b9
2023-07-29 01:54:34
2
70
59ccde6375a765f39f94a2d2bef2e4fd1502cd5f9a97aa48748a647e7a82e171
2023-07-29 00:00:17
36
71
16ae4c7bb16ee0bed3a6f9e60e6d92e17925751969b9aabcc768ff5e6c0df569
2023-07-28 01:26:06
3
70
97c2b832fda83ab2f9d8a3cf5a6d12873d4511aa1f3b60a58af998d5eab8a7c4
2023-07-27 01:21:55
1
70
2f2c5fe3b24b7dad91d2eedeace8eee854483b144d93138a38a71dfb6cd577b3
2023-07-26 02:51:01
2
69
05ea7ace8530dd813798cc1a89488f48525b0b9c34a6d7052fcab988600cb72a
2023-07-25 01:28:08
2
69
1b946dba9e6000cdcb2036450d4b945a8aa98b0328d318c69254adb84f6c77c1
2023-07-23 16:10:56
3
71
b476e14b69d37c1a9068460aaa59ee091d8e168a238265245d79df0fc2861e77
2023-07-22 14:05:54
3
70
dafd6fcf58f6d447e2a077316ef5825fe9242c11eae8682c3fe9157ac19f772c
2023-07-16 08:23:56
14
71
749dae7d7786771f143d14a2a1fdd2d92285a5ff767d75ebef5a3a4169454f72
2023-07-15 10:13:58
0
70
b1ff6e81b3483eec68c7083bd5d2473770dcbd6c27a5bed5157ae62415bf71eb
2023-07-14 21:21:25
2
70
2c5d2f5a3747e01c9435a26fd72730d583183c2f7122032e41ad0cd00469b9ef
2023-07-14 16:03:50
1
70
116d836eb515a1c80654a53606c6498f459d44d72b7411d1facc6ffca293e408
2023-07-14 10:21:07
12
71
28cd88f85be4b909f333df063379e06dba77a48bfa6c69d2b32bcc0f9eddf144
2023-07-12 11:02:43
0
69
9e907af6eda423a4cad5ec239065a6d93796b20c2f9153ae42ec5085a4193653
2023-07-11 18:26:46
0
69
948a47917b62e3ee620264df20345d4267dd2b583543c7579b7ddf6c8da0ab3d
2023-07-11 03:25:21
0
71
8a8eb4ebce8bdaf33259477286e2a642110d512569f1561e6879c0f5718c432c
2023-07-10 02:08:34
5
71
9edb7ad97148ad3b0e371df24f44e8b49a3b65f92dffbdab05008dd9399d8ee6
2023-07-01 09:57:27
0
70
7dfa79b206cc695a0e7dd97fa119b38eff1ae07c3fd017e0bff99da856dcbf88
2023-07-01 09:57:27
0
70
d1484ab1cdc785367f554dc32fbcc76f3d575a46bab9cc1e2b13974a9d6c5176
2023-07-01 09:57:27
0
67
81a1639cc4c9c82bb90c9b3fb1d8b4aadf06ee2423da33818b2cec440a623451
2023-07-01 02:17:57
3
71
e18077fa36c852d72886c55a87d9a5ef035bf10e23d4807f16d809f07b35caba
2023-06-29 20:01:11
0
70
b83ebb26d7c55551a001a029f887afee0d8c244f598f649a66ef79cb05dbbbf9
2023-06-29 17:04:43
0
70
130ed7fd7f712efb13590ee60a7b02d11e010c9d6458f9258dd531a744a225b2
2023-06-29 17:04:43
0
70
a0674eb25a164850e373afc0425848cb81be91684d2416f3d74ac2cfd1f35941
2023-06-29 17:04:43
0
70
7188a7e73930d5a369ed8482b6c73a4e9b6bd9c98a34e6fd25900e97b8c15b12
2023-06-27 01:58:04
0
70
8bd079031232c8aad2bf56a77b6ca105faab2f9074ba78ea5438f4f1c056fc1b
2023-06-24 14:19:07
1
70
7b543ffeae07f7af2e675ade1392b34f1e1524dca5af0b342a7519dfb943d47e
2023-06-24 14:19:07
3
71
7c3e1dc6ae52bd9509cede4e632f96fa6a0073691ef6b667fc67c639d970cd24
2023-06-23 07:32:45
1
70
71acbad6935acd2417aa6c6cd2eef257e0437a5bab56a2b691d218cdc072d4a5
2023-06-22 02:36:15
10
71
91dea33946b39d8db25cac1c8341dc974e3909dbf66142dbfb601c7aaf9b47f1
2023-06-19 14:40:44
2
69
be60c451cfab52c10d6f73d23678d6d3004488bbed35bd5947500200be1437b3
2023-06-19 12:07:28
2
70
ec2e3301ad64132d4de8ec198ec46cbf99627f20584a360379b3955a21f0e05e
2023-06-15 00:12:00
33
71
09a49a8e3ef71e2af062416a21a45deda1bbd920936d2a37d59c695337a5e6bf
2023-06-12 12:20:53
0
70
6e4c05ce0fd22f8c97d34c0b89e887a798a8aafc6012923433cbe117fa006025
2023-06-12 12:20:53
0
70
b0bea4eb9a334f1e30d1e990dd8776e361b1f93b8f6aa41f1195e343278b469d
2023-06-12 12:20:50
0
70
2e2a953dc0c8f5a0f4c9ae426f45e68ae8b4203edeb2309932531b0af27b8cd4
2023-06-12 00:17:27
3
71
c5ec1c78d7327e2f900ceebfd631d70a534db5e66940b6302395741d054e53e6
2023-06-10 22:06:49
1
54
6994ce6b73648d06fa6cd6daf418b218ae6b48a6eddcaf19ae0ec9ecdc5efa28
2023-06-10 13:27:04
3
71
62abef6cf833aa32b7f654866a7883e1893cf9d4c7b0f199cafcb92520d7f3e0
2023-06-06 07:00:26
0
71
66e18a52bf9a43d45a0b35736439ddf17ee688aac29221adb06b03ec2df7a926
2023-06-06 06:55:59
1
70
02cb160ab71df31d93eb77e438050f6357be2c04cc9c4bb7ec08cd00cada186f
2023-06-05 12:16:01
28
71
bc58d7ce32f93c74ab8032b19c5af4e45271a54d0071e93f8c4ea0eb23f16c01

Rule Matches per Month (last 24 months)