SUSP_RootHelper_Indicators_Jun21_1

Rule Info

Av Ratio
6.2
Required Modules
[]
Name
SUSP_RootHelper_Indicators_Jun21_1
Score
65
Date
2021-06-07
Minimum Yara
1.7
Author
Florian Roth
Description
Detects RootHelper hacktool
Tags
['SUSP']
Rule Hash
df274d86669c0286413d8763cf170273

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
4
Suspicious (< 10 engines)
53
Clean (0 engines)
3

Rule Matches

Total
Hash
Timestamp
Positives
VT
61
440d967cc560089238d065d7d5bf1e9277b612efb0ed5da6443efa0492075cbb
2021-09-24 17:50:17
4
61
10925cc9f48a3361aed4a05a4ed214027238255554cfe5a1c1f0bad7f9795420
2021-09-24 17:47:55
4
61
2a1d4daa32073e423057b8197bd411eef6c1452e4b651da1beee88ff1b6d2690
2021-09-24 17:46:46
4
61
edbee3b92100cc9a6a8a3c1a5fc00212627560c5e36d29569d497613ea3e3c16
2021-09-23 03:25:04
1
61
31330bad111ec683088227d6bca81a46d1e2581df67b2dd4d594a00d074fcd13
2021-09-23 00:25:08
4
61
62b8f5976abd4a5a4c5a6c959f9b0fef6b7149736af25d9d13c11f6d115c1aec
2021-09-23 00:25:08
5
60
bca86ddde4f213e562ee895af66b14c7e849b53b91a26f58fba22a8d0e07ebec
2021-09-13 23:12:55
3
58
776317cfcdfa341b0013b1dafc892b054005635f6c062b8578adca339c379464
2021-09-13 23:12:50
3
60
39d646f8e29fb410a373ae4c25e51dbfd38e5eb19387ae56100e4f44c068f1f4
2021-09-13 23:11:47
3
60
07a5527a1a7a350d8a13a8dd24c10b6441e0d1774a18f4001631592e8e12ac02
2021-09-13 08:09:52
1
60
26304eb1ecd554f72c8701f437c51d15d8987d2f0c88a731bf4b6f408a487b97
2021-09-07 16:38:31
13
60
e02e75732c51806781da661e6fc3de27c868d9a7962011ea791a51ecde1e457c
2021-09-07 04:39:29
3
60
fcb3d1b46c8de8668e8804d99230f5fdfca4b74fcf266e38ccac64f8686789af
2021-09-06 17:24:46
15
58
68d32c97a3d477910ca81c8c756f3ad7d0bf3d1a33eb8971aa006b94c47bc88e
2021-09-05 22:15:45
3
59
d75f724c8fa41b2f702b9775245e9d872fff64b8a834a66cf7cada73e05454eb
2021-09-05 22:14:42
3
58
a7bee566f647a0dd6b02080a0c2af66a5a824d76487ea522c528db13a0153799
2021-09-05 22:13:36
3
59
04753c1b2b81f779a64276644862b60e12113b7292f37fec6e84a12c6498d5ba
2021-09-05 22:13:36
3
59
cd0623a812aabab42825a7cd5f72ce0ef2b01a2cf79bd0e97cc087f086b495a7
2021-09-05 22:13:36
3
59
aaba876b39d4ec2106c98f5b3e179e12564e303ff50fecfeed9f6995680934bc
2021-09-05 22:13:35
3
59
9eec74a1f0f064d82f054e3fab5c2a65c6ecdaf27f339b0748ec575c44aa5085
2021-09-05 22:11:25
3
59
cc14b9ab148bf4a6f3328a03783422c3ee28afbc2a624453ccb643006f933f72
2021-09-05 22:11:25
3
58
4c4bb41aefaaed3bd8c9cd781dc490b2354499774d0447db0dd5faaf2c67e7a0
2021-09-05 22:11:25
3
59
bff54107b52e9e3c479ab2a38d22a72112530c450b47200e6eb03f994b8809d1
2021-09-05 22:11:25
3
58
2921d984a75fb74c1710d42538f7818a7e9685b94af4f1558cffca32c05142fe
2021-09-05 20:12:24
3
57
f6cf61d66fa6b49f72fdc2b6cd417f9ebca1a615dbb064f03dde1d1569380c1b
2021-09-05 20:12:21
2
57
f0507e009ba62d8af7ea8eb943274137ca36a3134d6ac38baa1a953e6756eee8
2021-09-05 20:12:21
2
59
616c8977ec398625d091a1ecccfb99e663284b004fecf7874686f1a60cb7a2fa
2021-09-05 20:12:20
3
59
d8af29a507c08801b69e32a99da0e12ad656c32da329e8d0532278c3d040356d
2021-09-05 20:11:15
3
58
95ac07ba77d0c384c9a9d63ee8ffd89c189ef6190f89c2f2c8b908c85d200f38
2021-09-05 20:11:14
3
59
5852cb5fe3d35eadb86e0539fc6ecc302fadd892369f9a5be0d89c5b8bd62859
2021-09-05 16:14:13
3
60
d0b001a7b0bcbe1a48bca0d7517e50b3397fed5cf62ddb9fde395105d294e596
2021-08-31 04:52:49
0
58
73935932c0706755936f31e6527cffa20e7160c37532f732b822f55d2d2c8e01
2021-08-30 23:54:39
3
54
cc4872fbe2c41ff464535c133eed5067eadadd1f28322217918b0e07f92717dc
2021-08-30 21:20:56
2
60
3be6f0ec3533d27cb9ef9ecc28816685c6f97d0fc07688e55aef279bf70fd510
2021-08-25 05:19:02
3
60
488b5a6af493d8985d3bafb8e3af86182ad9824a5f884cc95b99ccbd8b84b59b
2021-08-25 05:19:02
3
60
51b665b2fe4141cfe15b3b7727ff444d0134558790d9a8a93c0935d09a8d0131
2021-08-25 04:58:25
3
60
62d3286fbc04e6c18370b6531b30a4f1931627486a53a0888a8e870744ed00d4
2021-08-11 18:16:06
0
62
242d8a1fabed72f1a834d8013d59da3324f6a5d41fc9d48c0807a7753ac3a286
2021-08-09 01:46:33
6
62
ebb493873b5ba3a81f8d7603134acaa52deeb27f3c2f2718025bd98a0ff3b1ee
2021-08-08 20:36:26
6
61
dc70a68889a808ba9bad177650316b9135477a79fb5571a58aa823aedfdd2ae2
2021-08-08 15:36:49
6
61
3ebd04e8967791daeae15a1f7c63085b074329ec3fe0c859aee9c33cee62dd2f
2021-08-08 15:35:43
6
62
01427722f6f8a8de7de43b47adf74f2669d92d19acbbf3fd24b0673c47af4c29
2021-08-02 00:12:23
3
61
48ac437773f15f2729c9a21b72a44ab7f5150d6acce4f1319bfcdf176a674f63
2021-08-02 00:12:23
3
62
3584ce88a29ee809ef95896deb6b63f7dacea22ef78f16176ed628a4f80051a2
2021-08-02 00:12:23
3
62
e8645bd2a99e38bdd7b7da34904a9c57b80a34a0446081364eef78e81ae0f12e
2021-08-02 00:11:21
3
62
932a4f0d7a5e138fdd33007fb0d89f1301c652f1d94cd773f6f6c9a451ac256e
2021-08-02 00:11:21
3
62
ac2fc930eec0dcb14b9b0ac43234ab4d8cd85340e33ba4e09e4743daab76c4ce
2021-08-02 00:11:20
3
61
d7a8c5e9a66b8a89e81e672096353e0ef281bf45a3e5a6e56e95f9975b45a512
2021-08-02 00:10:18
3
39
e8183f21ad98c7dae0ca0ed761762a88541c901e97f3e428e771b197054386f3
2021-07-29 12:09:38
1
62
9110eefdb95cead215fcec2632277e68610ea48873e1f49f727e2bf6a3d4234d
2021-07-26 01:11:34
3
59
d776dc6b40dfd72cd075791006d04db1524e3240851b8153a95d07939b98053d
2021-07-26 01:11:29
3
57
42eeb511c731fa8e458326a8a902bfb1c6fd74f0b7280535f220915f7ffe20dd
2021-07-25 21:11:41
1
62
a53d9b02628f7e0eb39a3c582911dbea0d7f72431a75597952031af1c081fc7d
2021-07-20 15:55:00
14
62
f2c6a57dc43135204784116f52e6cf349cc7552a9a9f28b566d7b4d7c74104d4
2021-07-18 04:38:14
2
62
4726940611cf0a4c75961f45a638c9031ac7be92fce0e7b9c7fb5b52e8556231
2021-07-15 13:44:43
5
62
bde69042b1a4368caf041d1bc6296c9dfb01904f66ce04d03f6c21bfb8c7b81a
2021-07-13 14:11:01
17
59
4132ba56983fd64698daa3189b79ae97559b9a0911129e53a93ed7bc8f9e0148
2021-07-05 03:55:45
2
62
e7da94432c66cc4c1a85c38dc50d67c04e552179ab6433b81fa93f0ab277fe99
2021-07-04 23:09:48
2
61
247dc9bac2af86b32c5c141e2da024eb3fa186f5c08f88bb8bba0f478c1481b3
2021-06-11 10:49:22
3
61
7c49cf25bc7765dbd47e41e702fe0673c45cfa6066a56bfd76c0e8dc38f3fa9b
2021-06-08 10:58:19
0

Rule Matches per Month (last 24 months)