SUSP_PUA_SoftEther_VPNGate_Sftware_Dec21_1

Rule Info

Score
60
Name
SUSP_PUA_SoftEther_VPNGate_Sftware_Dec21_1
Description
Detects SoftEther VPNGate software used by Middle Eastern threat actor
Av Ratio
1.09
Author
Florian Roth
Tags
['EXE', 'T1082', 'FILE', 'SUSP']
Rule Hash
8ec2416ea77eab061ff9bf3e91773b48
Minimum Yara
1.7
Date
2021-12-21
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
2
Suspicious (< 10 engines)
5
Clean (0 engines)
153

Rule Matches

Positives
Hash
Total
Timestamp
VT
0
5b63f73ca57bffefc6f939c46c8fe2d454e9d5f41861d2618d2620a4f75b1c7d
65
2022-01-23 09:54:49
0
9b992adaacaf54deae56c7e128d25a75b1cb14de370230eb1f6645c9c530cdfc
67
2022-01-23 09:49:14
1
9f9b1ec6fd6f5aee0187ca4c13d78d95ccced097af1c08ac4d748381dcdab477
65
2022-01-22 08:57:08
0
4c0a5ba5caf0ee739f00c5fb23176b772843155277642343c256050d9a05af15
66
2022-01-22 06:17:45
0
68429f65b351be8d105f15752e4f01c0cffb7afe456074f2eefb17c77ca79df8
66
2022-01-21 23:30:15
0
2f4e1d0ad83eea44bdd93576bb05614352c41470a02fd8a80b74132aa3e58ba7
65
2022-01-21 23:30:14
0
537b1e1ab9e4666da273194052fe9cb289ff1dab32ad349867f697be49c14ed4
66
2022-01-21 23:30:13
0
fa915ddc52c48981d0fe5554d265c6ed8010cd3d83f462ff30663a54d1ea4ec1
67
2022-01-21 23:30:12
0
9b9bca0fa1406e1f573fa4277d108df199afceeb9df4e7f85eb95d46ab28d146
67
2022-01-21 23:30:12
0
06b445c9eb33286f1d04c87c53f8cb4b942b25f810739ebc00280c4262847192
66
2022-01-21 23:30:12
0
e95125efe76ca86fa2cdea8d67fb53498505b6f5e91aeb10346588f080e18f60
67
2022-01-21 23:30:12
0
d50fbc62c4c276646f9aaf834dd94dda6a4cd838744144ae27f1db866a3cdfc0
67
2022-01-21 23:30:12
0
ed4ca67409b7b2f378455a22046a2b774636ffb4c2c9773ac36b85bc590e0b6b
67
2022-01-21 18:55:32
0
0980a42a8c7eb74fb6ff44b1aa48820f60a441d705790a3c9772fa4c0fca8adb
66
2022-01-21 17:25:22
0
64bcfb697927cb4da156fbd2b64ff5f509b55d1b3b27715abd7d72b47644e42f
62
2022-01-21 17:25:22
0
548c6979fdbb912837d0d9581b253e1c00a7c92127ab439764095f91f280a6ac
66
2022-01-21 17:25:22
0
7c3ac8d5a91150f375fc1e5ae5ddee088bf7e6214345db0dcbcca3e635f3530e
64
2022-01-21 17:24:12
0
be20fc37cd2d36230ca757ad13df6058c0e27f233cce0660cc9a1193cae916c2
65
2022-01-21 16:16:29
0
e1f626402d14014ceb69744cced7ad8d1ba43913c12a6ed64bfa97269b0eb487
66
2022-01-21 16:16:29
0
7c648075f284f0b651d51851febe6599dca79ee63ff4fd2a116d064c54c98784
66
2022-01-21 16:16:28
0
2326da2dfb2852fa5358d43624da9654b903dc9d9de36ff017cbdde6f6d4ea8e
68
2022-01-19 23:56:19
0
0b55dc369d65613f21353d4abe96205ee47d29d6218d8a252a2e909fbd0cdfe1
67
2022-01-19 00:35:55
0
ee90909c5c77f14a614b291e34031c4a0087ab5868f988bba0d2f9d332348090
65
2022-01-18 13:17:44
1
627ded05b451a4185776931e893f335ef52082db1c8a7aa4dac7d647e74b356b
65
2022-01-18 11:53:01
0
37d63657525b51a02117075bb4c071f575fa573b37abd9454b0e48b4bc058589
67
2022-01-18 08:33:49
0
bee069b9eeda070ebcbe7f80c960716fff1729f35be61d16dad74a976ec4ad73
64
2022-01-17 06:27:17
0
76dcf176a67ed3ce61c65d338484c247a8c2bb7af656d3def13eb5049c657ff8
67
2022-01-17 01:52:02
0
6efc379c1d9e41fefe28a88d93243d081709db2cbc3662e553de41dede236056
67
2022-01-17 01:49:27
0
237a0c3215d466ccfa512766e849480c9190d042577996f548def8e87c10306e
68
2022-01-15 07:31:55
0
ca22792ba918c6eb52c2872ce947a46cf38ebaf2a6478821da115dbcb24111ae
67
2022-01-14 08:42:50
0
6d29d495bd33935e551c98c09ed848320fac82e5349ca528b2d94cc2a48929ee
67
2022-01-14 08:42:49
0
a8f8c3cb00cd1d3de853b636bf423977612068248d83cd84b5e2e8172a90f8c1
65
2022-01-14 07:44:25
0
5b636d585cac78699d3dab4db73621a807ea77151a1a6c7e1caf3dd69dfee8cd
67
2022-01-14 03:49:57
0
ca9eb0ab9dd8ea98b6f147604291462953c6b0da0dfdd1d0bc72cb2832ec1f76
66
2022-01-14 00:19:19
0
023d0d837b32169421a2640ec1e215bda6ec5b80b91a5fcb7bef98913396df6d
68
2022-01-13 23:35:55
0
72cfa8ea973a34544c7bed4dbd9533a1074bbcd537d91c5e4885f1578d6ac541
67
2022-01-13 23:34:52
0
435253965d700ad033b612b20b7f94ea78b8b4b701f13a47eedaef63ddedd66a
65
2022-01-13 08:33:22
0
31b47d65f01c75ae3cbdcbf923c704de2399e7cb16869217f62badf3b986aa22
66
2022-01-13 08:32:19
0
c349ccce6ac30917a220863ec8491b53e6461b764b91dcbd7c98c2da36deba60
66
2022-01-13 08:32:18
0
36e5b29eeab3a417bcf789c01e7b950b05ea130eb43d7747e374cbb5d1566a1f
66
2022-01-13 08:32:18
0
868bcaaa7eec273341bab40453afaa7ee6fd196ddbbc7b7d8f468bed9dcb33f0
67
2022-01-13 08:32:17
0
9a3f2c8aae4a3de095f0ddddaf7ba89566a81058a9118a12c25da4b1772365cc
62
2022-01-13 08:32:16
0
e2bd55677ae9c6adeb56c054f0ef3524d432abba70e43d98134b2b4c0b5a541a
67
2022-01-13 08:32:16
0
a25b42d5ad0a0c1a0f21878734908f733fc53d42b62087dfc708eb6985f558bc
66
2022-01-13 08:31:08
0
472bf6793412518814fb0ead438127569fdc5cb2da5cac04fd2f8890ac0f31b9
54
2022-01-12 22:25:31
0
9768dd3139e961de5ae14b4671902f346a4f5eebbd86f709aaf36bb994f98233
66
2022-01-12 22:25:27
0
b70502791c66d500898c9f33393085538b5ced15a6f278f3bebeff364c8f739f
66
2022-01-12 22:24:16
0
b5e3e6585d87a1437797ae5677365f3c87be22ddcc4a96f54aa5ccedc57f0897
66
2022-01-12 22:24:12
0
e114852c028472882421b451d760be6982873cd20017cad457df1bbd78f1a15b
66
2022-01-12 22:24:08
0
0ec5f0ac8d806cdf7d941d015c3d8be79a20f9ce4b50f5b9363bab1b939ba744
66
2022-01-12 22:24:06
0
504027d22b618dddc063d15528afc1636611bcd2e436540b88629e74fa9ffc2c
67
2022-01-12 22:22:49
0
54c884b6fe6fb3f320638096a76f9d003abe5617e8cafe4141cb505cd42ec6d2
67
2022-01-12 22:21:30
0
053ef37f4ab41e457647eafb4e514727f84186ed5c094ab722a1274a5e6bb438
67
2022-01-12 06:13:53
0
31f8b7ec91b220476bbad39d1c09977f3a5210b02515a70ba3f087f2d7881c4a
68
2022-01-11 17:08:47
0
128031972edbe77ebdf259771ccc32ff5fdbeef0b4f80d6d073dd042f7c2c409
66
2022-01-10 13:06:06
0
29e8044d0de7e5a518868732006cdfac67905a878110ec5210db96db9e6cc329
67
2022-01-10 08:09:53
0
d2105f5bf007efde5bea532db0f87e0292f82ffb05a8cfe20b866ba206c169fa
66
2022-01-10 08:09:53
0
150ce0b2e315172531ce57371612ff3a40bcba60a3f1f5aadb70e22a0a904bb5
68
2022-01-09 13:27:21
0
79451f235598fa2a2b44b0e302fe8485940918bbfc52cc2983b901684199efea
67
2022-01-09 08:40:27
0
89b167143de74d882d307065486f945c8ecd441dc78eaae9181020ff7b94e8da
64
2022-01-08 06:34:12
0
95249683caa8662ec601c28de75d09ef0806b29e1b1440e2dbb1c78fdb379e00
67
2022-01-08 06:30:58
59
af1d120bfe63f32d7bd582c298bc4595c9d49233099d67659bb7012bbf448ecd
68
2022-01-06 21:55:23
0
20d5b3b10eed8a7cb540db44ee990bd608e5329045ab20e2fb48a67032db9038
66
2022-01-05 16:24:58
0
f8eece02d6940b75f8dc6d63ee713cff7e0c712f0955758b452dd2710209de02
66
2022-01-05 16:24:35
0
11e0f9a3518803e6891b61058297a0a8989a0eb9bd69f4b2bdffc2a80712c108
67
2022-01-04 07:27:26
0
ed55cdab210888881827a0869b49f795a66f3d76837c14b312c1eb446f48a9a3
66
2022-01-04 05:26:14
0
2071e7029042a9ee26148174b20f302ddaec581436840baf8bee9e2380140fc6
67
2022-01-02 07:53:33
0
e925a0c91f86044991aee2c60cbb8289bbb0d5e686ab01ff968d53a73685c636
68
2022-01-02 03:09:42
0
43d16fe282eaa1f6630b209db676a1a20fbaa430a94474a4d44d37e91aaa3a23
68
2022-01-01 18:13:39
0
b8c5bbf689e99ab567679aa21b1702d809a5d8aa1f5dee74be0152d400b96fdd
67
2022-01-01 09:05:35
0
74d2cd41f4e323488ced25ec4d95d09c292e492204823d1e5f77f0b258940659
67
2022-01-01 08:02:49
0
ecf84896d6c41b83bf600c4f38f7a950269e4186b7c611806450417e6f3a9c4a
66
2021-12-31 08:46:33
0
c8a1aada3f685c12c2a72a2f47d5f04e5e0185464ba9e0ed2750f29291c664b2
66
2021-12-31 05:10:20
0
c317a925a06b23014ffb7fcc70709e6f97301c0fb9919dcbe6076e1ba1676040
66
2021-12-30 21:55:23
53
891bf825e441fa637b3b586153f1617df29745a7890c9b9d37e82c494418657c
69
2021-12-30 21:07:03
2
c3ce3e7f1ce5ccea2599560ce183cce6cef46fb8130149e0ec7f237df24e7cc3
67
2021-12-30 09:31:59
0
11a13860346574a85d6dcacc89ca3ae04e2a6609e151b4752da2459b68e0a83c
64
2021-12-30 06:52:36
0
1173226ac565cc586690020a8654fa58c3be571fcc3db0af4d9ff57c5ad92ac1
67
2021-12-30 06:21:40
0
73ddc6500dd570e30283a6138f4b2f22ea699962c50e1f9dcbb13aae2e69966d
66
2021-12-30 02:41:40
0
4cad13ae611222ba438ff013f47af82a60e7735e3da8266a9c5b6c6d372ba249
68
2021-12-29 22:53:13
0
b75000d94a1259c418f29e85d700cfa13e08279ee07e47915844bda412374d1f
67
2021-12-29 09:18:14
0
dce5df29bddff5a4ddaea5c4fec14da91f7b69063a6e1c45ed61e5da4fc6c87b
67
2021-12-29 09:18:12
0
c56f1d8362a11cb37ab6f6e941c7c5e2359adb88e860c7c19b735b9fb97e5e38
67
2021-12-29 09:18:10
0
297f8d687bdbe32944ceec2830ff1d553820e084fc018b86bdeccc315ae8f26f
66
2021-12-29 09:18:09
0
24a6fa4516252de4bf3fb19873dc38c681acc764eda839c59c6fad7a460453c7
67
2021-12-29 09:13:53
0
4371efe19f0537beb3390cac1d798b60028e132bebc00d5f5e93f224877a91bf
67
2021-12-29 09:12:50
0
97717fa68b079f29f6bc91c61d19e00b1f1a253b7480a49e920aad50ff5b0e6a
67
2021-12-29 09:12:50
0
f685f0dfcc01ff23ac167bbc877197077915c56c6635f330fcef0216cef8e276
66
2021-12-29 09:12:50
0
1f0a3c12903ac32d99037bfde9adb3f8d2be2197c115a435c9ced94192ed8c53
67
2021-12-29 09:12:50
0
8d6bff914e250a7b8f3e17dcca60bea4f1da0ac6ffc0f89d7ecab66351e11c26
66
2021-12-29 09:10:46
0
7432289f59471f23df2788a0cc6d0c4dbf92bf81582f4810fb24884a27e44246
66
2021-12-29 09:10:46
0
15e5e20fad26960758dcf0cfac49178e910d776d5417f199f682d1b69c6d5cec
66
2021-12-29 09:10:46
0
953f97f0507bb477e491c96afae1a007f0612c0d1f6f01ab3a5cfdd23d1dcb0a
67
2021-12-29 09:10:45
0
ae66de769d8b8bdaaed098cc3758da4f51b08a4cd3cc0cdc6eadaab021eb54ae
67
2021-12-29 09:10:45
0
5bc88b4a9edca87975239c055418e0ce673f93fbe55fc0e8a807a01fa4091e23
66
2021-12-29 09:10:45
0
443d4e64cbb214f304a6e842480b2bdfd4fc5b0b0f0cc24c15e5f19af4c77161
68
2021-12-29 09:08:38
0
0d282904781efb7fcac3f7c884be5c60c70d1a7bcf96e806f7004c8781c80ece
66
2021-12-29 09:07:32
0
17075b34c69b6beac609dce7f48e446992ff2eb3ff9b58e29c7d4cf162da1d3d
65
2021-12-29 09:07:32
0
aece7d355e60349525d5e910a0c605326182c4a54848ab676c45364374b2ec1e
66
2021-12-29 09:07:32
0
dac537f534baf9566795b5f203e3abda61bbf3f5b2ad837de21d99352cc560bf
67
2021-12-29 09:06:28
0
024e8be02989c726ad90ba19c8a279af3d47dc4fb301f8641f22a583a52c4b9d
67
2021-12-29 09:06:28
0
25d1c00efbcda3d414cc5943a5b20b66e3c7907abf7a359cafbe60b8714d3423
68
2021-12-29 09:06:28
0
0d0d0fd35ef0e0dbd9f18db2c16b04ffbd638742f34d535c7214075909da9026
67
2021-12-29 09:00:03
0
5dcddd18f01e87fb64c99337ba3de65b62b6697826122c0c2e65461ad1007c91
65
2021-12-29 08:51:27
0
6f902a22449eab3284a6529550e0773e42b5f344308a02d864bbca95ef439f04
65
2021-12-29 08:50:22
0
6d722c6a0290b499b1a353e3833bb24bf08a58a1286a26c3840f2d6106cba745
66
2021-12-29 08:21:47
0
d0ea269539597e9835e7d09d0588ab168dbc22c80a7b67a27c455e66a687efa4
68
2021-12-29 06:45:50
0
7fb6283a5ab1055b72011c92e16d1030b05a89e038032e7beeb60dc06400d6ae
64
2021-12-29 06:43:39
0
c76786fcfa8be32dfdab3d02b32e2f4fab861ef3ab597f0ac4371dde83ddd7ea
66
2021-12-29 06:36:08
0
0667aee2bfbf9eb5e97485f08dd814adf16dca8d85132b97cb8c77f35be62110
68
2021-12-29 06:34:02
0
3960f3ca532dbffef00ca74b462a3a863fb1f4e265c253d4bb95e1ed0ad363a7
67
2021-12-29 06:03:06
0
6a525ec96339af12984b78e61d67a6b2cb50b4c6b957d5686dd9bad654531b0a
66
2021-12-29 03:01:07
0
4f28fe2d1ef6a9596c019e2a0891b91d4d77c11248402cddb3d5cda82d9a3294
67
2021-12-29 03:01:06
0
c8af9c6c00e5108116612b234a9ef4052079db8cbd71b27e67cf7b95e0f98eb2
67
2021-12-28 15:12:24
0
a6459904a7fb2fec4217fe6a9b9caa9db71789ba67882c00f6c94698b1895151
63
2021-12-28 06:43:47
0
3e07c9464cb09f8acf19bea65ebf7d01a1f3c7e0cc133e5b4d45a34cc5137bd5
65
2021-12-28 06:43:45
0
e303d3677ddf8314e8c00ff814d9542b4429dbfad1d2f774910ed3309add1770
65
2021-12-28 06:43:44
0
8aff81342f09a7c435dec2538cf404f1bf9992cc45db6ea7c59d28d1a06f1a90
68
2021-12-28 03:45:32
0
dc79d36a3226533eaf9594d36a0b02573337afb9ce9e3249e697196376d4b0b7
68
2021-12-27 22:05:42
0
8a153112532bfd0e681d4c003a674f4a1df4032998802976b1e6beb8fe8da462
68
2021-12-27 20:20:23
0
67dc42225eea5d6c01b7e0ffec658bc96e277afee70245ade90fa762f96d1863
55
2021-12-27 16:19:23
0
6de4c16a0cca642318a5d7f0a5f9fbfdfd513810f0ee22cba6b2c0dc60f92f98
68
2021-12-27 07:03:05
0
b76ac6930e8a7e89e19f24a03c4dcc2f34e7482ebcdad3bc7e17fc81d8dc8f64
67
2021-12-27 07:03:04
0
9d49e8956367f40df914e6701cd7c706ab7981e2bd6b1637b5acbd64d3f05277
67
2021-12-27 07:03:04
0
bdbe62f162b7d70a4a81dba71fbe6964966c7a293d2d4975e13e4b92a8a9186b
67
2021-12-27 07:03:02
0
fde35b9a25a775bc5cc256b1152c8e97001d9611d8ba03b74694954974905f4b
67
2021-12-27 06:59:53
0
58ecaad7b6f1e74398ae787703316b30c4a81ad175213c674716e495e6a291a6
67
2021-12-27 06:52:28
0
ba6562ba46f8304f2a9fa7869152056a76e3c9c1e5461e9b5d0d5ffea8460188
68
2021-12-27 04:28:13
0
3f15d236d07d56a95cda89292ad95e1de55a330e0e1ebd3148c0ec922138f5b8
68
2021-12-26 21:43:29
0
872b6f1ad8f2961b4509968bc2421e304869948682363b712ec977aa4d2053c1
67
2021-12-26 13:06:05
0
030c91ea1f653c3aa65df0b180ed5a0a29c293a14004b1a5f607ac6361a15340
67
2021-12-26 08:45:53
0
d4f2223ffafaf27a8e5b836d4714485aa037e335ffdd37609afb94808c295d9a
67
2021-12-26 08:08:06
0
8f16068870f6816bf088683ef6a36457f1736f5dc7ab2892ff97202074a8679e
64
2021-12-26 08:00:37
0
130f3616ead2c35f5f9344349eb1d1d3ad0030ed48dfaf23415b5c35fca80e28
68
2021-12-26 03:00:45
0
c2f74cebabc41636b4f1e6fe992490b500d81fc36499679f1b5f094a8774b870
67
2021-12-25 16:05:02
0
80faae739874b37aa28e4c34412676a31ad1bcc12de95e4ce8b067a8cb352b7d
63
2021-12-25 11:14:27
0
d69a6a8ab2524068b9ebfcbb1a72e3876e077e3107c05f9906c4bafc3195e8ea
68
2021-12-25 09:32:57
0
09d11457fcd426790d3a1896720daff3ea015eacb086fcbbbc13412e1c31e837
66
2021-12-25 07:30:46
0
3cf6525001e861a9227d5945ac5758a2972a6b3f00e93672bb00c7e1009c80ab
67
2021-12-24 14:17:20
0
d69546fde6a339f57c5fdee2283d2bc25e9186c57f01f76b6e2585084b6babc0
67
2021-12-24 10:55:43
1
b1414749d46ae976d5f04f7b1c15fd40550f2203d4016ede9d81a4cf5354b0e7
65
2021-12-24 09:53:22
0
3e80fa945e5b164137433e170b464c7ddbbfc74dda84a823f2271bd211b865f5
61
2021-12-24 07:16:16
0
68fa4a8fe9037c7553f21f7e034078227e2c9a6327e247be11d3134b743e753c
66
2021-12-24 06:24:47
0
64206f1e03b4670343628f053cf925f35aa3c3a63b800254e6b6aac825aa6543
65
2021-12-24 06:22:41
0
4504e811386d51a5be91fdf1220326038e9715f9c3da0aaa75658be80a358ba0
65
2021-12-24 06:21:36
0
a5efc1f0c4c7897fa2446acf7e40a34a5b02eba1a7ddd97f4bc929cfc6da801f
67
2021-12-24 06:20:33
0
f79d7194e78b59686b4b7732a0730daf5e88de2bc46abfd575c1e4e349463831
67
2021-12-24 06:20:33
0
b2af7de34a6c2edee8ab3d60ae94a53cb35bca52165b6b9388e5842a542bb1de
65
2021-12-24 06:20:31
0
668153e26ac42dff99549e40c1efebfb326f4e31b828185e603e176af347a7a8
65
2021-12-24 06:20:30
0
04dd956885b1df52f713228531b627b4424fa7d1dfe70e43064e37f406078614
66
2021-12-24 01:14:15
0
db6e462a039bed18bfae23773a8b32991d3ccfc320e25f5644b94579b8f489d4
67
2021-12-23 13:56:14
0
add43853862a99900eadb2f781584f3cff8dcb545406b8df65d17d6f9c5bd77b
65
2021-12-23 07:47:42
0
b80ef26a181b12184ca1c017c51028a70d44c5377ef681aa29a2ce2d9af73f02
67
2021-12-23 07:43:18
2
25881258d2aa1e6cbb8cd2482cc9ea1dc8a36509a977d6fa588f22caadaffc38
66
2021-12-23 06:34:08
0
b1c59ae9135e5bc5e6ad437e5413a3e3833d71c06ce1601255800f62f128cc18
65
2021-12-23 06:20:58
0
3085966019a4a8e80f5bef97153232c6f8c5f2d18463614f265b787463dfad2b
68
2021-12-22 22:53:56
0
140e91eeffb116c17106d3a1a33eb21f637de42309a692901fd862714a03b6b2
66
2021-12-22 22:30:08
0
365de185edbcc89a7ece9137cbd6636b44381681855d4511d245c969cf2039c4
67
2021-12-22 04:57:28
0
2fa0ba35ce51667f2bd37c2233c9d6560c386bdfc7890007557bd04627c9ab4a
68
2021-12-21 22:38:25
0
75b87a164e002a4f5c0e50cf257629385ea8511dace8a8d2ac7290140cbf7269
68
2021-12-21 22:38:22

Rule Matches per Month (last 24 months)