SUSP_PUA_Splashtop_RemoteControl_Oct21

Rule Info

Score
40
Reference
Internal Research
Name
SUSP_PUA_Splashtop_RemoteControl_Oct21
Description
Detects the PUA Splashtop, a tool to remotely control systems
Av Ratio
0.3
Author
Christian Burkard
Tags
['EXE', 'FILE', 'SUSP']
Rule Hash
0b083b380743afeffe33e0d928368df8
Minimum Yara
1.7
Date
2021-10-07
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
19
Clean (0 engines)
77

Rule Matches

Positives
Hash
Total
Timestamp
VT
0
9705f72e4ace9f41b2445d5e87bc86a4d27668c3a86d37e2bc65ea637b939f1e
66
2022-01-23 10:05:14
0
9aa038fc0d558a9ba374e1f18e456a69dba47e574083485d68f72b69da4fc924
67
2022-01-23 10:04:06
0
9e2f2d662334832ef8724f2849eab54f1080e4cbbdb0a7dd0b4ed1c4d70be9a8
66
2022-01-23 10:04:06
1
884555b3b468476e276fe618734c6fde0f33cc86ad4a30654901918715fcc697
65
2022-01-23 10:04:03
0
351ddaf98a40fa8bf4a0790387953060c7f7f7264b7615172e2a012033b1b583
67
2022-01-23 10:02:53
1
fa7a4fc46b0f0a1c406384d54394541eee346f5c15604d024c6b27df84cd9222
68
2022-01-22 17:16:15
0
62d888b6d617ee1f53be87944379405115226af63f46c1be34cc31fa3efed025
67
2022-01-22 14:44:57
0
9870548e78b155e6e958d110e801e3d3ddac9d6919e6408be34f2194706b5a20
67
2022-01-22 11:18:09
0
0d0f65a4c5f39bde298d9f2f8807bc7a0c5fd549fcd2b303d231d2dda47b81fa
68
2022-01-22 11:18:09
0
54de1db36d999391425d7ab65d6aac8fc01f9f53cd634cbca297a9dc8540991e
65
2022-01-22 11:00:38
1
36d54512344da543d0854454d63deca838d758163ff14b77994477acfc267cf4
67
2022-01-22 10:59:36
0
a072a01448f102b5c5a9d74a584f9e86f9a6ef052d8314b855d25911473db301
65
2022-01-22 10:59:35
0
b807ead6681f88430112a751cd34617100d43a90c7eefcdbd57fdba57ac8129e
68
2022-01-22 10:58:32
0
7719f751074044f3430e4f2763853d4487904394b258badbdc9fe7851b1671b6
66
2022-01-22 10:58:29
0
24d7dd4c7695c18cf6c498fe703f15e482a2247bd33d3cfcd67146a3c76a487c
68
2022-01-22 10:57:24
0
798d76e861668b856feadbae449c0909996f6df07d00098d970578abbb255d1c
68
2022-01-22 06:40:46
1
d8f12f233da1c06cbd0ddbdb5f21ab06b100b09eb603ff0572b2e49ba3334603
67
2022-01-21 21:08:40
1
b6c4398d6b5f5ee37daeee14dbc9099015fc3a939af5141d609c61b5dcf3354f
68
2022-01-07 09:26:26
0
dd902adc805faabe075049c9a58af432561b04659ee0fc2b4988e7db57222ffb
65
2022-01-03 14:06:21
0
fcd096a6ad9ab0ffb4bddd2c6e35be6bb4af3c1b98bb190222f93961c9b0a8df
67
2022-01-01 12:16:12
0
31beb0b6fe08adc3e52569329bf8d0aeaf519fbc7a29f9f724787a4f3a35bae8
68
2021-12-31 18:08:25
0
a072eac3d0f565dc4db98d3c4554f4a8a2f5919047b41d5b7969694889e23153
66
2021-12-23 11:07:43
1
7552ca5323ef3b16a99b443b9fa54299f138bc05c7e99714b29b4f5d0011c6a8
68
2021-12-21 17:19:17
1
46b985fa56277b4267527407c2e6a4319d89ffdeaeb8d849994fefb0b72d3d88
68
2021-12-21 17:09:50
1
b0b5807b6a64aa2b4b2a90dd08a1f8a8f8f6440ea26940e9904d6c9226ecfcf4
67
2021-12-21 17:09:45
0
1846b494cd1e353e0b5129dd0af3c24c679a0ea1d7506b7a236ca0012726c3a5
61
2021-12-20 14:56:34
0
8bd72691a7a631cc234769b86d54c28f9278cb21e2d5dfd753e6e82c527c76d3
65
2021-12-20 12:26:04
0
f124c7ee4aa1b1b8166956987f5fba4b1563135ee01fd465fd65e2a2f5fca18d
68
2021-12-17 04:55:04
0
c00c688908384c46b595484f9a29a5ba9ca163e87fc5b26ab1793c8ddde47c27
68
2021-12-15 15:44:26
0
234f657a458f9cfc6281b2b70be92ab7aa0eeb593b60d41020bcfbb12caba585
66
2021-12-15 10:35:50
0
6c2b5cf3ff63e263c26094903194e8c28c74bb634995302bcd432b8f463cdba6
66
2021-12-15 09:22:54
0
38bd2004c3e55b5015bd11fb49a40ad7ae08356b73e959b9d6184721155556b6
66
2021-12-11 14:20:40
0
f2308851e415a7c15ea2ee6b5235b97b0277e058871d6489cbda7312072b3260
65
2021-12-11 12:18:36
0
5cdd12ad1640cec1fb7c12cd8ce03fa93b76be64ead2bfb02d5de16f8b1dc29f
66
2021-12-11 10:57:19
1
5e5e84e3b286c7b9b424346211aadcda2aa57b5d9912d1f7b217cfd8a93cccb9
65
2021-12-10 23:24:29
0
f97b359b3665efa1e2320fd1777425f5d2acac2979203744ce374325049f88e9
66
2021-12-10 23:06:12
0
887b5a41102d40d1bb13074233f6cb89b398c1ab36a45207ff7c0c4cebfd34db
66
2021-12-09 12:56:53
0
ff0683e0524a6b9089b95e347c2b41c533b10c578cab38e70c554b8273712ff4
65
2021-12-09 08:52:32
0
b9afb9d537429fbc29eb8c03b1bcbc424066a92d0d9ea64fc4f1dc583bdf83e3
66
2021-12-09 08:20:28
0
d5d0c55e548d93e9da11747a6abc2624cbdfb5aaf3539bcacc46e2cd8112dcff
64
2021-12-09 07:11:37
0
e318717380c2d04f6cbf7a16b6d46bf57b2116687798c342d0e712815337bb9b
67
2021-12-07 18:52:28
0
96398ac0dbdcc24f7ccdaf2d86c642b1e5d1e8b2639773add28db632d673d385
66
2021-12-04 08:28:29
1
174dfc7e8160d86d3e842b49d7cea38c3855f7163e727755dfba2a785047166b
65
2021-12-04 06:15:57
0
477bdccfbd356343e42c84b86068f35163a57b3ebd8291578d588e6de3e9fc26
66
2021-12-04 02:06:41
0
b20148887be1644617359f45da7e1dc973c2e10c7d6f829071bef5beb5ceb212
66
2021-12-04 02:06:34
0
cbfa0b430d6a7acb23bdf3bcb4fa59dbd18b492ad47c2631caeafe68de718ffd
64
2021-12-04 02:06:30
1
9cd3dd93a90f2d6a425bc20baa2f0c2c97f91a883dbbb624bcc379adb792b632
66
2021-12-04 02:06:25
0
21435011d7a7c05045f0ebf0a87ea8184b08dbc7861e1e3cc15ce9ee07b45a6b
66
2021-12-03 02:06:26
0
c96872a9f23d681b9a9c6014e096fcb53dfada7ced6baf11f8d24a6d543e7272
64
2021-12-02 20:33:50
0
54470ebd4f4d26a5ffa7a984bd2a17980b8e49d3341c20f5bddcae7a59792527
63
2021-12-02 04:42:26
0
bffc713b09c0062c465f5352668f6452e5d29a929a1615f5527d606c7f312d75
64
2021-12-02 04:42:26
0
1a2767fbc5d07a3ad1eb8f06cf193bd26bdec9790f11f3081a0d0a0d181186e4
65
2021-12-02 04:41:21
0
9d759fe5633a77e1e474667f38f99edb0a639091e7577744376577bf3f5a0b76
62
2021-12-02 04:41:20
0
1c20734c8337185f6d9afc9d997142bc28e063c28dac0b5e6e1dddd178a38df9
65
2021-12-02 04:41:20
1
a8d3d83d2f271819a4eb95eb1699fec9eecca0ea1ff5a5a0515550184471d56c
64
2021-12-02 04:40:14
0
43d919bad79f24e71f194518630d1daa2faf9d388032d3eb2f733079bf7e7fe1
63
2021-12-02 04:39:06
0
ebe8e61e0c1294c5c4008b3ba0a58ff45b361a4abb35a8a198e3ac7a5aa2e1ea
67
2021-12-02 04:39:03
0
e9c8bb9570846db89fc92316c3f915228dfd99dec12f76b483a50ced4fcfb0a7
67
2021-11-26 02:06:35
0
62b80fe590a5fbf80ce9c531e1d418bfdb8ce64b36aa9626e1d33f96e96f08da
66
2021-11-26 01:57:59
0
1bf65b73a88a64b4eb401795693f18a5e4bb42ac6909aba5d1fea1b882113a6f
66
2021-11-26 01:56:40
1
a97da7ccae12c5ee807259facfb25a17b0a51991dab95876fc80363e737a0d28
66
2021-11-26 01:56:32
0
e111eb5599699d9e070f873922e428143d69cb5689d87b5fab005c78796e68e7
65
2021-11-26 01:55:18
0
3f5708f6839706c26c43ee553c76157b97f6f139b559b644c7c6190327f696c3
66
2021-11-26 01:55:18
0
7584a6a1c4101df7c65b0a8e2696e73fb8198d309abca6e859dcb27536ccd522
67
2021-11-26 01:55:18
1
2c9372488784bdc0b626539c77544f6f7fa2b344c6a37abe6827be0fab1c4512
64
2021-11-24 22:48:00
1
7f05dd10e223ea793382c21bb57364e06dc25e9a0af48551c7d72cc619f39e89
66
2021-11-24 22:34:25
1
aa3eae67cf6a02535bc91d4df210e5517db4ce2d791eda9726cc315066b661f3
66
2021-11-24 18:14:17
0
d6ba10d4938c5feea7a79fe816961043487d5804b84bccdcff36e7f0c617a06a
67
2021-11-22 19:24:28
0
060bf2f9366612ac2a4935a7807fe77b4a0656b0d34e9a385f5aa1e2deef2fe2
66
2021-11-18 12:08:09
0
41839faa97f4abeb4b3620aa65e75e0b3f5be73d72923885807082b141e34d03
66
2021-11-17 21:40:24
1
d81e10e083004a5ff8b4135d80c9272d75bf71f3fe83af76aef5117b523321b3
66
2021-11-17 17:59:19
0
61d05327269f1c6dbad39e189179708fd10642c295e9dca44adbb07f76664723
66
2021-11-14 17:56:49
0
36275cf40841d81e186cf279f87a6160568d776438ef89b0f85d685c31878245
66
2021-11-11 15:52:46
0
d657c10fb3166b1d1ca04a2f3e84ebddd72962462d52751622bc4c1e42e61c66
68
2021-11-09 11:22:34
0
bac95f14781eab4ccaf24b72f74f5d1d54e8bea62d53f01fda31bb93637ecfb0
67
2021-11-08 10:08:23
0
0069a0acdf856488a3bc74177ee51aaa3a915b4d408f19048c1588d2a6a1e1bf
67
2021-11-05 11:06:04
0
8bcd8008ca7c5728d0d88d7ee165fea4fc3a6c87a7c08575f6cb8bb3118f818e
65
2021-11-05 11:05:35
0
a23ac6b3a71b4e2596c4be981d4f86e4c002605da28ca51f77871c33bad05bcb
67
2021-11-04 20:23:14
0
df98013b2aa123bc7d7eb5027ecf97451cdce1e3b1f71c30e34b58981d12567b
66
2021-11-04 20:15:16
0
298faac2495b6e2814f051a88e4c0294cc41af5ef69d595adc409caa40e4c2f7
67
2021-11-04 20:10:17
0
a551ec13598f71a6d45347df0e0d7b422da483a170322a02fd89e23ef2392ebe
68
2021-11-04 20:06:11
1
712ff1d7c19b14600987d71b4f7704cfdb3454667073b4e54a1cf452b8291518
66
2021-11-04 20:06:02
0
e99c75193a7b1298c2b6233aa55b30599fe29a0a12eb20224f618d4638df6151
66
2021-11-04 20:05:45
0
125642801f69d950d157bb6c2c27cd486961e90614e79a327e998bce01b8aa00
68
2021-11-04 20:05:36
0
b791df8dfe3b7045c1a0c6b869b5d03f69cb34c4fada9dc6eb14fd6e49a363cc
67
2021-11-04 15:10:03
0
555dccacc63f0656b9a21040e534c50eaa4418898e6a76689da7b3e32bb654c2
67
2021-11-04 14:58:22
0
8edbd787060f41740a524171e00656be3849bf1203697d523cf8c7eb4bd40266
68
2021-11-04 14:55:47
0
82b5d4fa2989ae92f473b453d43271d4e560b20a5c0ed9efd30570bffa273683
68
2021-11-04 14:53:15
1
5c17b66be05e18ed8e55c05bab0b14ed1df366a235d8b2a1d45242bb66718c64
64
2021-11-04 14:51:59
0
f5587b37fa5b32e3f62f2fe8653224972756ef86509f74a98c122cdf9ae4836f
66
2021-10-20 10:15:32
0
1aba5771199fa0cf181711a249a9801eaab3a653392563876120f849cf743775
66
2021-10-18 15:10:54
0
b65aebf4290d458ac8f9aa61c4d427a0716622e6ad71529cf857e981155a5f1c
66
2021-10-18 15:07:11
0
51cebe17380b34db31f1395ecb7049a2e3a118c2995aa4cf9ddeea80501a566c
66
2021-10-18 15:07:11
0
f89f8f001dd259b781e0df8bbfbd98fd46fb5802ece87e245f4d781d34fa3b7c
66
2021-10-18 15:07:11
0
3289188113292a9cbe8fe4a06d7071886ffce08e8a864e2e88677ec6fbaa516e
64
2021-10-18 10:38:42
0
cfb61b6e237ba6b56c5b0857c3a89402e4c226732e5122a6ba6dba52eaa35302
66
2021-10-15 17:07:00

Rule Matches per Month (last 24 months)