SUSP_PUA_Compressed2TXT_Encoded_Feb22_1

Rule Info

Description
Detects files compressed and packed with BAT encoder (could be malicious scripts)
Tags
['SUSP', 'T1045']
Date
2022-02-02
Required Modules
[]
Rule Hash
a3b65d3028014fc4eb8ed062540fd07f
Score
60
Av Ratio
4.53
Name
SUSP_PUA_Compressed2TXT_Encoded_Feb22_1
Author
Florian Roth
Minimum Yara
1.7

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
14
Suspicious (< 10 engines)
32
Clean (0 engines)
72

Rule Matches

Total
Timestamp
Hash
Positives
VT
66
2022-05-25 21:23:34
2d2999b8211cce17ea2fef31b6aa17b138570c6d5d074e172354d152c7d82a94
7
57
2022-05-25 14:58:27
c6fa78d100b8b80a37ec6155a98335bb07a1d526e4c90048b01be977fa759918
0
57
2022-05-24 18:07:39
9d3ea84b575131dd05610bfbdfe9964e4ff32e587b7792b9a5613f72e99b1f65
0
56
2022-05-23 22:53:57
f992587735f7e87530bdfbccc3b81d15af614ed35a2768fc412b69c5194f5244
0
56
2022-05-20 18:05:44
2bbc2cc74823cb5e05d12785358e05b8a22bf515d4596336998d1cd01ce1ce2d
1
68
2022-05-16 02:30:21
ed824ca0a624ba63f6fe652acb83e008151dfce91ba8ba1db25137f384cb4de7
17
58
2022-05-12 04:20:34
7e0535032bb74482ea1e4115839864b3765fbaa095382666a0fad90e2ba25eec
1
57
2022-05-11 23:26:30
71913958c1075b2879b0c6bbe85713dc9c4bded7eeb6d179fc212238c8dac2e5
0
66
2022-05-09 19:18:12
f65b078c64f327549c897392955349acdb6ea4b4f01be6e3280582071db17c14
14
66
2022-05-09 18:28:02
9c785ca4d84be0fcf8e8c5310a6f1a757cda623251db9649c2dc3ba57450515f
13
66
2022-05-09 18:26:55
7fb78eb077863d5a57d0d55931ebab1611ee67b5ba63948eefa1358bbbb58407
14
57
2022-05-09 18:06:33
04ea476aab879e4595a7f1d6710e241609cb73f5b36bd5831e74601fbbb6cffb
0
66
2022-05-09 13:30:56
46124ab9f66bdead0b753756714e2eed4dcf104127778aac2906ed90fdc1d869
12
65
2022-05-09 13:22:48
e365a7c304c903bbccaedf74bc7e9e560c9d72a20b914b512839c04b20f76430
12
58
2022-05-07 14:31:23
e5635ec57605d7d4d8e1c7aad076a2766c8095207767fbad44b1454b1b81b640
0
58
2022-05-07 14:30:02
31b86286099d51e8df0b9882fbcfc59c0f7baf98b51b57b514b308f124787718
0
58
2022-05-07 14:15:44
6f6b998dc590b36b2349804c435fac9f8aeaa9a863dd606a6c9635bc80211536
0
51
2022-05-04 20:17:29
1513797b5878ddcb9fe2d8f72b8c2b26aa43faedf77d18155575ffd834dd96e8
0
66
2022-05-04 19:52:50
6c3e7dbe318171808ef8016825473090a7bc35daa397ec03aa1667ecb9a9cfdc
13
57
2022-05-03 06:15:22
95fc2d9bb20c1c4e74bf27630095b470e20fba7fafc1990fe005d40ad1a76048
0
57
2022-05-03 05:44:34
b754903eb0e644727b1a80c6b49df05f1fcd1a2932e75b2f5e3d9ecd814d7b7c
0
57
2022-05-01 10:49:57
adf1987e90827c5c968c4385bdb03f3237c6dafa7669fcab6a8498cea8e24eb3
0
57
2022-04-26 19:40:29
4766560bac50869cfc1faf119049158d3ca5a7aa4d207e15714713cb6cf55b2a
0
57
2022-04-25 14:08:55
ac10041088b8ac3b58e49f2dac86c99d8ebe1ac77a0b4cf611393cc51f8d3c59
0
61
2022-04-24 18:25:58
60e3dc42530984c817e71dd4e7c9a1326163c8fa1242ae19224becf998e9a035
3
58
2022-04-22 19:58:11
7bcc5c94762638fa45a4f3c66243563e6892db05707001d438aa4a8e0da18c6e
0
65
2022-04-20 17:32:56
966bc8ca08515f82ebe43e068cc17e7ed36364abc410c53382df523781ffe86b
9
56
2022-04-20 16:33:35
da7c501a2080920359bfab149c6cce333adb15a690801737dc4c7a21fbb91ca3
2
56
2022-04-19 22:07:42
4bf16545a48b1a446f35171c8019be8fd07bc7f072981134e8d5a676bdbc2d9f
0
62
2022-04-18 09:22:46
44d22b064a7f21373e8c4a5565df2afb7f4c433237e425dd2e25ba527cf4cfd8
5
56
2022-04-17 23:21:48
d2490bb042f0790eac5f7c94b2c894cee152608baee6c2ce78df89ed7e111f34
1
57
2022-04-16 22:28:27
4d4e64d83d357f338c77ec98cad8fe009cb8a2577057ef8e8102643a3e2949d1
1
58
2022-04-11 20:46:10
522e87a09c556e876ac70ea04863beeb36d763cecbf656efa6152a4bc2568d40
0
56
2022-04-11 07:00:24
5599af717cd8877fe73f438ab6df6e4e0409d31b83eddab729ae28d78be70259
2
57
2022-04-10 17:36:41
8ffb46c1258b669a108007d16a2881c6318c3f0e250b42aada16f681bf6c366a
1
67
2022-04-10 08:42:19
8bcb282c40a04344a5ec60b1c06e9f67d0992ab3e1802bfdf65b4495a3f5bf9b
2
56
2022-04-10 04:32:27
8c3c58b308de6a33e5611683d423a6b6862387d1edb5a182db0d10e0c1bb1c47
0
56
2022-04-09 14:35:10
835c111fea16028a2b4579755793c110ea6c8f777aa96e5fc1521601a0b60b03
8
56
2022-04-07 23:15:12
dc4bbbfb136ff73c3313f4ae6978728f59130a7c6ea0923a80ee9cf2688a85c2
0
57
2022-04-06 21:54:04
1336980f9790aae280f305169bbc74e06b262c5ef7ae6d96595a8f3260876b7f
0
56
2022-04-05 05:11:10
972a776c65fc19f866ada89b82a23fd9ffee49574ae90090fce13552f6127c47
0
57
2022-04-03 21:54:07
772bc9b6a1517e6a3863b1c05529dbfd1095e9fbc4eef7bbf174d9aceffcabdd
0
57
2022-04-02 15:47:09
750e142458edce0dc0001e758b371d109c0006b9a2fbf8064f983635d3ba2067
0
57
2022-03-28 22:10:59
64fe2f25d5dc1cee900f99efb948efffcdddff7ce13b08231ad5ba857e4bcc51
0
57
2022-03-28 08:45:16
1e2d192133e93b220dada935a1191621b247253ac353b905862c50c4774eab6a
1
57
2022-03-26 03:06:48
dc501edddb14187f6f9cf53ed620cca06dd8dc3fa64a9169c22908d44d8fc084
0
55
2022-03-25 11:21:55
b4b9ce2e0964dc6823fc795d90c78db8687836537ca17c0afcaede8c4f3c04fe
2
55
2022-03-25 08:03:09
d511ef163c6f358211a0459440c2bfa5903618bf755f920075ff66016142f618
0
55
2022-03-25 05:19:21
ab7f014cc33866ab278771f885e1571b4e543fccccd382b2ded9561fff28bb27
0
55
2022-03-24 03:08:57
c9d51c9c50d70b1fdfae69b9dd5012eea45cfd13a2885e1c420c03916915a006
0
68
2022-03-23 13:30:46
da9177db1104e0c7beaec069746dc67d905e357a766bf639c9c765c9c51288ae
23
55
2022-03-23 03:07:36
7df7787b4936cd5684e260adc308db498def53f6d790c468c7823e0092ebd7a9
1
56
2022-03-22 16:45:10
67504983925fa6af5f50661b0fbdf9aef275e9c0c40747208befaaa30847e551
1
56
2022-03-22 14:50:04
73adfd819e6072ab5ed33c52d5578f73b12945a37c733f7fdcc6e50856329d87
0
56
2022-03-21 11:55:56
b2f09a8d335114354e10a678ae724dc88eb204901ce9f68d301c73c80129acca
0
56
2022-03-20 17:02:05
6051ae6a639164beb8d7aa5813748a3e9393dcded378d121d49b01a0a3f321f2
0
55
2022-03-20 09:13:32
539422dfbc877765787958a5348b326fa41601b4c70b7b147f878b0022d60a10
0
57
2022-03-14 16:36:12
de43f74b056a24e4feb737d2d638931d9d5395fac0421b52bf7ce47f509fb8aa
0
55
2022-03-14 03:23:45
6079f56daea065542154b86cd33c17bce62b6d961fb432bf5c334f8864067cd0
0
67
2022-03-12 14:04:48
c8f180fa1d08cdf7255009cb7d9ab18936efca198cf228bf8a968f016a238bc6
21
55
2022-03-12 12:52:18
c6a653f69fbb649c6e7ad3a037547c7eee150e6998b6d34a1b532c415b57c661
0
53
2022-03-11 03:47:06
f7f101915bf890d78aebcdb26bc6433787148764db5695f303feb9b258f7dee3
0
69
2022-03-08 12:20:51
8020f60cc7a4f404ff718bdc2d274362aeb0fd33bf3a82c000cfbcb6dab6597f
43
66
2022-03-08 07:13:47
8b02c834071c2e76d4cc5dc974acc393ea15d1a5fb0d69f3e9615f06c3f8ecc5
6
68
2022-03-07 21:55:52
16debdae049ebf9a2a3637d364fda1f7d02e3567a561d69cfb2d98bedf198a43
21
67
2022-03-07 21:53:31
8dbc483691656e3cf2d919bf8d71d1caa9fc158df4330391a5bb5a3f3a8a89c4
31
56
2022-03-06 00:11:06
914cfc385b3a4acd1b7f5ac05c131a7a704d58d2d6b4463e4f3502a787fc1a71
0
55
2022-03-05 18:38:42
0981ad292949f388eb56c6179360b19a0c162541ca429380cab7e397b4d56396
0
56
2022-03-05 18:21:07
882089b29c8c63f78f45d489066851d26635c54049261f5203923434f57b57a0
0
69
2022-03-03 11:19:39
13a62245098022b70735fe0bc017b8d65b092cd61378b76c0c35daa6b3e55a0f
3
58
2022-03-02 18:48:39
c1f700936b038257227c95350aae4c4f51ad10ddb638ef986f73503e55001350
2
56
2022-03-02 11:15:58
7c35361dc6ebb5e1af0e4d5b5fafacc6be0b98a7b89577003645855db5c51062
0
57
2022-02-24 00:11:39
4534138dbfa7b55f674612f8fb2c7caf727260e382611d1f5f6f90504d05955e
0
51
2022-02-23 12:00:56
58cf0c073aaeb2d47a9b72230629d3638fa1e48c02dc99003c4b123764e16834
0
56
2022-02-22 09:50:57
a76d1db14b72b295179073e55478d76ee9387bc1bf06da502322196e3e71fb32
0
68
2022-02-22 06:12:17
ef33522a391143708c14cb066baddc83fdfbc995c50a993696b80fc9ea21e71c
1
68
2022-02-22 05:17:25
d052894c2f59f04b30e678b132927d75fad76fa63509b1695708aae11e72fdf9
1
58
2022-02-21 18:07:36
ccf0521242ee9cb86064280060a24d36b716caa562aa3ed074d9110a82631699
0
69
2022-02-21 12:03:52
fa201ff7c342cf48135002a0547da257ff1a9eebc505f4232eb0b4a85eba43cb
7
57
2022-02-19 03:26:28
8b8c5d5ffc3cdaccca76bce8d68c70347cb6d8a476a1251195c92bef206dadbc
12
69
2022-02-19 03:22:02
62e1c2b27ddfded7a4d2a37122bb2bb01c386f949ff3ed5439039376ecfed689
1
68
2022-02-19 02:22:29
ab2d836e13e722815998f4aa8f44f748395f45be14ad365361fdd378c47c9e1b
1
63
2022-02-18 00:08:29
578e3cb37548ea0041f124af1a308159c9513f15acdb2fa322632a732c2eb1de
12
57
2022-02-17 19:22:30
f8d2ff88ec95221e5b6c9991a8b9bc5b1e1da16f945f4aeee9513901fbb109f9
2
57
2022-02-17 03:13:34
c8ed8e9f65eb36b8c6d01a6e2779e087ef8502625129c9556651f5910b86ded9
1
58
2022-02-17 01:19:23
c0bd788c481a407f87f62298ab60138ef07ca6c937f0eef898aad0a36b8413f3
0
58
2022-02-17 01:19:18
545bbc56c56d6fc304f3cf3bbb44d0afd43f4f190fb18e0fe5da2384152ecf69
0
57
2022-02-16 16:41:21
a81dd267edb17f75dd4db1bbcf9f6b431d170781a89ef8b7ad89525a0c1cda24
0
58
2022-02-15 09:06:02
aa6d26a7a6404c6fda8166117201021a3a52dd656e183c0058feb895292173ef
0
58
2022-02-15 03:38:49
06c4d39da956673978a8e456deabc8c1594a43c7ed3af73eb4cc0e92e94533c4
0
58
2022-02-14 11:58:42
c5b8a94247b006d75fb2d514ee76a7881a536494eedd048043f28674831435a5
0
58
2022-02-14 11:11:38
8760d41e97aa07c105507fae2be799c4df868673f8fb810c522a7eb74cf6337b
0
64
2022-02-14 11:10:27
95e1a4c01e62228aa02dd8d8722682330a11c686571edd9b516f742c32847546
6
58
2022-02-14 11:06:03
f7a8efdcd6c2a8e0978bc52f7349fd08c62bd0f6df4dd5a60d5470bd7836a6be
0
57
2022-02-14 09:16:51
388739f45ac12e135430de2351554ada5cdf2e3680116a25f0b1d23b7ae880c8
0
56
2022-02-14 08:33:14
1094061c601cb82c12e4b10ce566c096029c0f62214f21481c2753a10c812742
0
58
2022-02-14 08:29:53
505e39c769d62d55ae513b4d001d9b5a4bc8b27946899ce0ef6f2a30c806b1c0
0
58
2022-02-14 08:24:21
149b1f5e128ab90db02ae7adac1651a6f31d77be81e1cb3160b87cbcdd9622a7
1
58
2022-02-13 08:25:43
6198eaab4b1f5169a8ab2f62fdfb2fdc7d78c20d75f947512869a9bc72b4f602
0
55
2022-02-12 14:40:16
5b30965a962afffa1b810972928f60bad7d24346c79724c8bba29bc6b4c5ebad
1
60
2022-02-11 23:05:44
ab3a492c6e90c90c96f628d5bb71266ef29ecb581a959e515d7410e723a41d20
1
57
2022-02-11 13:40:12
8fafb544ddebcaf8bd0ca92eef780c39290009e4de9e117d1dd1cea5fa73ebd7
0
58
2022-02-10 18:58:14
d80fca2b0645e0ec0023d7c5abc7b36e077317e15aa4b76dc19b611693dbe10e
0
57
2022-02-10 07:17:46
80bcf95f577e5e255c020b06114cef068c7fbfbd37023ed783e0437e97d89716
0
58
2022-02-10 04:52:10
fe4a4b97671980fc835dc5cc768f21dcd9c736e930a3f5ef2245b9711c7f1823
8
57
2022-02-09 22:12:45
54c33e9c26ef68f0521cb6d6a416fcd2a6c22537d49ade62db6935ccc4129927
0
56
2022-02-09 04:50:32
0d52b9c76a9ec6d6381c1ef1f1eab9dfaace561d305e4ff6fc2fb7c95a8365df
0
57
2022-02-08 22:34:05
71c8fbef92e0f86d8495b29b64ca30624458829cd7b10355cd23bdd6418131b1
0
58
2022-02-08 19:47:20
9e3e9a6363a592bc5b54591cf45aac3fa0dff26ea0985e0313f4e929d2b7652e
0
56
2022-02-07 08:57:32
54a653c36f7eb2850f6272cb3069d61bedbd8379d9e8d024db24ae41d66e7772
0
55
2022-02-07 07:57:20
8152017eb4e624ca98d68b7e29a98e897cd042f23d46d51d781f5bae3c872e29
0
56
2022-02-05 11:50:20
0e20193700f1644ab019d9e43d894b3001b7376c49e205ea967543a1a0ea2f3b
0
56
2022-02-05 10:48:08
445d649ca37e012f951aa46609f11f56ee5738a279bf6305a4d5c69c026426f2
0
55
2022-02-05 10:48:08
b94d9eaff992be399e3bdcb1d5b52a99633c8f59a9591357b5a021aae04be6ea
0
56
2022-02-05 00:10:49
9ff7d4504d137778db224e0273dfde4d64312f3a076e9fb50b4d9f5237945a4b
0
58
2022-02-03 07:42:45
0271e8f4113a31d688668d0e3bc7d06c525cf082930a8930273d5d9a69ce981d
0
57
2022-02-03 03:09:00
da9866f8a545929c11d2d57b73943c51e9450c8326c7de883bd882eca7cc0c8d
0
51
2022-02-02 21:26:09
d593efbc037d78ba1d6ed4ee7aa2813bb34e42fd0afa1a4059c988f8ee8c7dab
0

Rule Matches per Month (last 24 months)