SUSP_PY_HKTL_Characteristics_Feb26

Rule Info

Name
SUSP_PY_HKTL_Characteristics_Feb26
Author
Florian Roth
Description
Detects characteristics as found in malicious Python scripts generated by AI
Score
65
Date
2026-02-26
Minimum Yara
3.5.0
Rule Hash
ace523b0aaeeec4738295a237d1ada35
Tags
['T1059_006', 'SCRIPT', 'HKTL', 'SUSP']
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
5
Suspicious (< 10 engines)
20
Clean (0 engines)
24

Rule Matches

Timestamp
Positives
Total
Hash
VT
2026-11-12 15:05:09
0
62
52b87fa17d25ca5aaaec57c6d32377673cc564d8b572d6f710178884a853a21f
2026-11-12 15:04:19
1
63
8bffd9d9c5cf8f980a0aded24157cbb3c47b77b43b9beb0b26596878c25b3e96
2026-11-12 14:25:59
0
60
758acba94215e0ffebd1db823f5140d77243ebf6697f96f42bb1272dec85cb5a
2026-11-12 13:00:59
0
63
d8b26fcb0420446ec1a982b31238db7c6981d684558b02e38e2ac864e627fecf
2026-11-12 12:20:50
0
63
942477e385f89ab36851afb03a99b75fc974595de13dcf6fafc31c8c6ddae883
2026-11-12 11:01:19
0
63
41e907ae4a2ee3f46ee6cf1c8bdc4b0da9c70c1604b482d166fa10dfc1b9d877
2026-11-12 10:19:09
0
63
d65f7a7bbfa45d7e9be837cf0f73336c71afb1ca0de41b5222f823082de6d3b7
2026-11-12 08:54:09
0
63
b8efac8493040f4f17ed788823961d9494020527ba90accdf99c0565808b07d9
2026-11-12 08:12:11
0
63
1c1a553a4301cdf01923bd07436da5b8e2b9e17c66fc30114f93b02bbbbf0eae
2026-11-12 06:49:09
1
63
185487dd626a86cf49823a4bb083b350132f2a53a903da181b836e5599cd77e2
2026-11-12 06:49:09
0
63
4d77a4b0bf00a6f5d9033d711459da04116d9242f1c0e6abad8738b1c7505151
2026-11-12 06:10:39
0
63
ad1a052ec9753b732778c670edd9fa9a15cbd6e53d0ba8883d68fe957af934d5
2026-11-12 04:50:53
0
63
ed375dfe4af739d70cbb5f635709acc7ce05e24c9a31223615947f75af5c53d2
2026-11-12 04:50:40
1
63
0b7e4d0b26b24dbbbd38709f94ec4faade3612f362c4cd74b31320816887956f
2026-11-12 04:50:29
1
63
f34ed2f0302dd814afe7eef66615050ab59838a30ec42d9cbcf5f8e4f7a1f6eb
2026-11-12 03:44:09
0
63
8da1a114f7645b9fc192a1032fa32b8459e5c255105c575dae3544c27da976e9
2026-11-12 03:43:59
1
62
c1f74fb413730be2902f50e29cd2bf785ad0079fab67d89cbd066e7a80d9d406
2026-11-12 03:43:50
1
63
e3b1b72ea1ac276e5558eb7509bb385e4f0224ee8a24b2ba6faf61d6cc6a97f3
2026-11-11 23:16:50
1
62
d38b54ead2fc50c3d0986572cb11655ce697d7516d2f992a25b70b39e5f5c1b8
2026-11-06 02:03:49
0
63
8db6d6806efb31fe491fcfecddce865dd97cfccb1975116d93613ce12b590916
2026-10-30 00:43:07
9
63
bec892a4ad9445dd1e7f700f2dec1370869e736236ef975e475ed69228f894a0
2026-10-24 22:04:06
1
63
66411f47fc8e7173d3657630942ddc906204a76974b2f16237454301e7c2b36f
2026-10-19 20:10:48
0
63
cb82fc82f0adce09d923f1e0b3d39117e9874e10500dc986430938a95056cf47
2026-10-16 06:02:29
0
63
6c47a6902d9ce50ff7e6392382644d49ab57eee431c92f17112ccafd529d7e97
2026-10-16 06:02:28
0
63
afb374a1d853fcfb1c621785538d83bbefd75816d4e5e1aed59f0b5376e5ace0
2026-10-15 06:16:58
1
63
3c4b54b17026d060008f4ff7b17e4f82118f062c40d964d435380e1de39e01e6
2026-10-12 17:24:06
1
63
57e326daaeea4fecbcb37334f234224f2b42c6133443469828c3f69620909e00
2026-10-10 15:14:15
0
63
db8dc6241b476ce63d634e800f7dc0ba8b9b32f250f7b199ceb8ef9a58d6a201
2026-10-03 17:26:35
7
61
7b6260c3689ad4180f4396cd2b5910251b3a3c84dc7db78cf6e3796bd0ffb94e
2026-10-03 17:24:06
15
62
9c0bd42a40b077036a6f528eb57db2d0de0e2ad359ecc2f7c17fde8f8b0f9318
2026-10-02 16:01:56
0
62
f59e88b27dd7778fdee40ce2750e64b025525d78d46c69382ef0973abdd0fddf
2026-09-26 14:13:56
17
63
ab7fbb5c62179f1edb8d9f22c31f84a8d596dd6327f2fc6057c841c2512dfc72
2026-09-26 14:09:46
12
63
25442e6bd70fdb28a2714b7dd5d9de4f56c3c3628c76631e9f238f8014529612
2026-09-26 14:07:25
9
62
321aee9b98e030fc8a0ccd66cd9763591fb5bf30d6eddd4427b5dde618be7cea
2026-09-20 17:39:46
14
63
58459f105e05aa4b48a55b7d29affa3b69f9d18be4483071197ba7592bc1df5b
2026-08-29 22:55:23
1
62
5a31be44713e5c534add545c5f2be6c1a5fd5985a8e46d90f92158c1ce4f0d3a
2026-08-10 15:31:56
0
63
c184254c8f80f56ec9d92989992ef7bf20bc6f91f15f03f7ca62c2f33a833ac7
2026-08-04 07:35:29
1
61
d504d0eac50f9e109c242183c2877a8c493e970da965e5512018a872168ae9c2
2026-08-03 10:18:17
0
62
f731c0a4ba270af8af0a9c1d977dee74cdff6cc1626bf5f82517b6ece2eaedec
2026-07-31 04:22:17
3
62
d669adaf615d3fbfdb2b4a31eed48e1c81da4a3a39f2aa8cddba64393f511fd1
2026-07-15 16:39:16
21
63
1024d20c5086cd6e3dc02441742ed3454fbf12bb1462feec3b83d9ecd701ccc0
2026-06-12 18:21:14
0
63
1ab82138f44a013d3ae02bafa1c581f74150573060542c538f49c23d644b4973
2026-05-15 21:02:38
1
63
ad4436866072c614a74d32109472c5e9e0330f5c0a5cd6a6de2f8f387e6e0b6b
2026-05-15 20:29:25
1
63
c7b4ddc7bd0ade9b4d6c1c4d795b6782170c085405f8888c485dccbe8543cc5c
2026-04-21 03:00:45
0
63
3ae2540b3aaee8c7eba6a5fdbdaa30644a8fdf87f506b535c879578bf0d64c55
2026-04-06 22:52:55
1
64
d29eea5e19be99e60aea11c03659cee07579876ee4a7f7408e12b0f31c15c717
2026-04-05 18:01:54
0
64
41a850a8b69cc79526306c716d226e58bc6495d8b998aebfcf34d94429a16152
2026-03-20 06:30:24
0
62
175d8204706e080b5b9cc7a9fc1d7397c9a6ce0e1c3a1d3c1e37fb348ddfd12d
2026-03-05 06:43:57
1
63
5b3313f5c109e72887dbedf9538a94c142596b2d0addd9b04a2d0af798051def

Rule Matches per Month (last 24 months)