SUSP_SAM_Hive_Loc_EXE_Jul21_1

Rule Info

Av Ratio
13.39
Required Modules
[]
Name
SUSP_SAM_Hive_Loc_EXE_Jul21_1
Score
70
Reference
Internal Research
Date
2021-07-20
Minimum Yara
1.7
Author
Florian Roth
Description
Detects suspicious SAM hive location in EXE files
Tags
['FILE', 'EXE', 'SUSP']
Rule Hash
a11513e5b0b4c8558e472b78bdf8df47

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
22
Suspicious (< 10 engines)
44
Clean (0 engines)
48

Rule Matches

Total
Hash
Timestamp
Positives
VT
68
d25cdb2f4e5a105fc203df03f36a3a3fa078f910faa68ae14396d59ce3a60729
2021-09-24 14:42:24
53
69
7d2608307c07d654c59e87479de171751a3684c3416d5373c45e0ffe40d2e159
2021-09-23 16:03:05
56
64
444b31d4db1c876b7c11fcaa3cb879d162721089843b53fc4241c5f008c76f39
2021-09-23 15:19:40
0
67
1f48274cca04753d2bcc22e8faaa7b418bf7b560cc4cadb844ec01dcab81a36f
2021-09-23 14:57:02
2
66
abe1f486d85154605a14b8eb62932c960e0a3cb23494c439c51292c999400193
2021-09-23 14:49:26
3
67
5a645236f9706e38014800717842483e853b7df8e9c9ca6c4411f8d64e44f225
2021-09-21 23:29:20
55
65
aac8b6c3525f9ee3ace8392b9db59771b44ac7408422edc5eb004655839e82c1
2021-09-21 17:31:32
0
68
78e1af6f381709ba602c05a3ffa01c3dfea18fb7ff48b1503b13761400a15f52
2021-09-20 13:38:25
54
69
9ec55aff17849ec13e1fd57cf433c698d1c6307e068a6f50905584dcbf65f333
2021-09-19 16:02:45
55
67
288506a5e91bce7b6d67f164ceca2043981e2c0ffb57b1c9f43080df87ba54ea
2021-09-19 15:53:54
54
66
33b37a8b14d2e4a193baa702ac21ac763f56654bb52dfc1ce65d96b163c1ba2f
2021-09-18 08:57:54
0
67
5c9eedeb7aed96e0cd86d801a4fb7035fe48e01eab8f714b076a93bf4decd5eb
2021-09-17 20:11:53
53
66
075bb87b3963c55ec5e5fe5d071e0aed9b5a88f1c484de0624bdb8b7e2b37cfd
2021-09-17 17:54:43
0
69
781afa5c1e23d7e235a632609b58870dc3e2a02693684a30f4d86aa6f3be27a3
2021-09-17 06:35:44
56
66
986cb6ed5fe29e2dc9ea14f6999bf6e8d0f0f0430825d353c2d9eea5155b7d64
2021-09-17 03:29:35
3
69
23ab3b8f59f1485be211ecff6be60a341382c8f519aa6aa063f6f14dba93f272
2021-09-16 04:03:30
53
66
622b29fca64bb19582618103f7535ebb476dafa94f509c48962f8247b1da38aa
2021-09-14 16:33:00
2
66
44e82236781a7fbc4c847898e763636f3234080ce4f098537bfd043b679117d4
2021-09-14 16:27:31
5
66
b09f73fccf94e1758272906cad36910e95c182286c9693f433b94b5f49afe63e
2021-09-14 16:10:53
6
67
e53b155cfb16650e5c8e91c5f00fed0e9c5386576eacdc9a03d01a946f4f439c
2021-09-14 16:10:45
1
66
1a39189a9872236802e390fd56916899b3d8d57a3ec2cc5af3017563bb2ab5d4
2021-09-14 08:35:28
0
65
9a85ee607e2503fe9a9b9aacb74aadbbfd2a01d460e6cad33053978c3d02c19c
2021-09-14 08:33:09
0
66
6978b7dccd6bd18b11b1723246170967a012435c45da1ecca39a6a9df09821cf
2021-09-14 06:32:54
0
66
ee5d962cde3777a7d07012d934999e37eb0f98a3bef61350c29eb721569173c5
2021-09-11 20:36:10
0
67
5f3493e942de7ab668b58952b2bc222f8c3df21cf293d7f86a27ecb4e6490329
2021-09-11 20:36:10
0
67
e9e98b2a28a6c83f252977bee0effeb3aaa335da7c3fc0b0f9f9f33a9125888e
2021-09-11 19:14:34
0
67
a301b3b7b20c7027ad509bc5c0f7714b5c0aa28494a74e47c87323c46693dd47
2021-09-11 17:41:28
2
66
3f41f4c70a1f9448ae2779f807d54cfe654239cc4b62ca9466d88e8c5c11c55b
2021-09-11 17:40:26
2
67
4bfba107796e73a38721787770fba2983dda3bc4c6b9d4312b17e6609c16b6ee
2021-09-11 17:39:11
1
67
37f6e3b57b4e1d58f4365079358853733f49de3c52fdcdda4f1dc8e847238d92
2021-09-11 17:33:11
0
67
b9144b21c61d6ca670b6f59b65117ab3f33a7e2c41136839eb82311f772bfc59
2021-09-11 17:33:09
1
67
cddcc1e5cac8f3d55341d1e488a97d6fc0c1c29728352c517724d153993056ad
2021-09-11 17:33:08
1
67
74c6680801fc41d8a4258903ea15fc63538f484955368f5067442f82b4fc44a3
2021-09-11 17:33:08
1
67
50ddaf17605e0b495ff8f18b5d8f88e09ea1d9e4e6f13363dfc722aa957bb5e7
2021-09-11 17:33:06
1
64
db06ab750b7c17416c8efbb122cd4f187f14e0c986e0d715db9d5e5a0a92aa55
2021-09-11 17:33:06
1
67
4c6b1988cf42ca8c68696fdc6aa7b92fd9da3d814d1f27904cfc61683828c776
2021-09-11 17:33:06
1
60
8d7eb1ce9d7026477ce705b36d6f620607ad407d03e62c4abb7836806d7f909f
2021-09-11 16:08:57
0
68
24b2c35c2ec090646b668382f5e0850e260909f9ad92e0e8f2a7cdb638ab4aa2
2021-09-09 16:50:05
0
66
9caebb88ba8f4087273bdc07f37b260a15dc2c7b4058ffac77a147ed1a27c032
2021-09-09 04:24:31
0
67
d73dbecaa626c414d406d72e3cc50f5c21133105d6c19005fb19448e00126934
2021-09-08 00:32:20
1
68
334df501991498b9a598e2dca29db1c7d43ea2dfebf48d7b9a69a73a57d8f1f6
2021-09-08 00:26:54
1
67
38450439c16d4933ca6e7c6346f1c0b6103eedd5b8b58934017cbeeea29639ed
2021-09-08 00:24:49
1
66
da31504a45b9343232860b0e0b96de3c775b47731a1fb8047ce7e4f5c55483f1
2021-09-07 12:45:53
0
65
a98e2c5dde56762cd9d8fb3a5e60e7af799e7c412f5078af4af5c7e61cf2cc5b
2021-09-06 16:55:39
0
67
c581966160407e052fbe95258fe1de69c8451b0da62a0b02a227ce720bd687cf
2021-09-02 03:34:22
0
67
048b9f8b3410d74c752696fb341caa22f0791efd2771790f7f3c1b60d98cfc6d
2021-09-02 00:34:04
1
67
cabd7c148ac0882b294e40918cee4aee206822b73cdd0a3e7b37456495f672a5
2021-09-02 00:34:04
1
67
c659c279c8f54c4b0f57fe2e36047e8e5adabbb5f0860667fd58928a5080d3a7
2021-09-02 00:34:01
0
67
37a8683007dd11705ce771ed27b3b0d07c17072b35047a09871f3f2bd86bc6fc
2021-09-02 00:14:48
1
64
8b2558570e16db5972ede0c750beab652dbadc12e3708068f1dad97e8ea5066b
2021-09-02 00:01:00
0
67
44579b0c70e0e0b0a09817b855113860fcd49cce407d3510ff621a274ecf9497
2021-09-02 00:01:00
0
67
1e21dc290a262266fe1610b4870a38d4f3b9a21f9193da6a7fc619b2c92563f7
2021-09-02 00:00:59
1
67
f1a93aebc25cbb3fcb9a98bfbc9ec935a17b945cb0233387c035aa2c8c39781d
2021-09-01 21:31:19
5
66
51beb09add9c0145fee6501df44b69434b9c0b6c66ce2ea4f81270abf93c11ba
2021-09-01 21:31:19
2
66
c0b328d82f8178d4a425e1876c5e3f6de2bab696aa0fe27b1a648211785780f7
2021-09-01 21:31:18
2
66
27bb2c93cc0b1bd6e13b0ad8385c9ec414ef99d585c6378ecb0d050df93a1ee4
2021-09-01 21:31:18
0
68
1ff990fcbf5162aff2af4647028d95a964939d6389f2beddefdc6e545c327f31
2021-09-01 21:30:09
6
66
2b15d0a95cde6ef6be947adfcfe21adb758e39ac65c2c82f4d6895a78c7ba850
2021-09-01 21:30:09
1
67
e8f15defe77e86f914c46ca5c9f73ecbf2184a1d024d793ca3b1809292d8bbfa
2021-09-01 21:30:08
0
67
d17c2a73b35edae4b7414ffa03eab5a05a046a6129f5a1a1ff43563507a57343
2021-08-31 21:37:47
2
68
18fee39ace01fd6d069a75d395a889efdd01df79c3f9478e2df7047b5bcddf4d
2021-08-31 16:45:31
27
66
90828214970d99757137bc43880d31b047bc9c8749ac89457db05813f662be87
2021-08-30 15:03:43
0
68
df753ac9a5c243f24680620ac6c06fbdb05b3aba5aa685bc53419fbb628b79d2
2021-08-29 20:04:40
10
66
059f28e9b517b9345a30e409f1e7eecaab2d643a180dfa8fb1d105cac137cbb2
2021-08-29 18:17:06
0
67
6a1075f4fab4acd2722e8946cba7b23508d120367c84aae3e83284124227013a
2021-08-29 17:16:02
0
67
a56802a0a30b3951dd9fdeda3ed8b8cd74f9920cd78fb34a04c78d5e076d3aba
2021-08-28 17:43:22
4
67
09cb333bd8a79d0e3f556d51a34b3cea4d841b12b214a7602db8884a84c11cac
2021-08-27 16:21:18
0
66
de68cdf2dc3bcd9716382dd8571368f4183c913b473ebda8639da47268ece597
2021-08-27 07:14:30
0
67
729b56d8e0ca2479c886057c9e945890a6721a1b0d5d3beb97d5d3a4d0004514
2021-08-26 21:55:05
0
69
c1d00d57422b9d756d1f57c2a37569f8acc9fcf59411302071fb0adf3fbcded6
2021-08-25 19:01:11
55
65
af4ebcbba4cf2b8f466c90a318862f10af4d691198b9ac26e2b42bb9f35caf6e
2021-08-25 09:43:51
0
66
a85401ed18070e746eb47cb86cdcd14994e0282db527a5bee85baa3af10949b9
2021-08-18 09:37:25
1
68
e62b703428c14786a56774c58852aa2bfbb4759f491906475fe3415140f44b53
2021-08-16 19:42:49
20
62
7447471f02abd30225bb231961b0a20dead6daed4391480d514e6ad18f4982f0
2021-08-16 08:17:57
0
69
7faf56825d6e7daa34b8e12c6fa3cb161c727b85d8202e12fa35021ec01b5d65
2021-08-12 00:21:40
54
70
3686df3d6c29e74db160ddf0adcb7084be122045cc14abd22d81faa2c1c18fdf
2021-08-12 00:21:39
53
69
92b55905e02b13064fe8d2d5856ef788a3e4d3ff1a72633d3dc788f3bd003704
2021-08-12 00:21:39
54
70
990be647a0d2c6aaebc9de704fd83ef633118fbaf01bb5d2ef0b3d449025afaa
2021-08-12 00:21:39
56
69
81cd93cfb9119459ade120618aa58677c96f6b13a92b329980c96b2b76e2fdd7
2021-08-10 18:45:01
0
69
71e081c3e0c8bc1cf6921c374d2d17c43159a506c5c05837c31ceb582a3ba0f7
2021-08-09 22:27:09
0
68
5b1892674ceb2f7a6a2b655ae8384af9317b2fb4d877d50469eb2d56b39af967
2021-08-09 07:46:46
0
63
3cab8f7c3bf7ca2886572d2d3cd425f629c0fc5a39bae5930479cfed2489196f
2021-08-05 08:14:55
0
62
4f8030920b64c7e77cb0c80ee96c3e6d73135fc6c6ea2044319612ff45af022c
2021-08-04 16:10:17
0
70
621b7a7319327f3c661ea85220f264f22056c091d4851f2a66cd938e91bd1749
2021-08-04 09:14:17
8
69
6e52d80f054ebc77cf51d203f43fee7ab11fb0bf47001d70b08c010118e15897
2021-08-02 17:04:47
0
68
11177e1d4c244f69e17ad119922c00c184c6c4404a6edcdb0a2526d5622059d5
2021-08-02 03:51:22
0
69
fd33a53d02229aec83bf0c65afdaf64b9b05e93b285dff2e7e81ef3ce2ab5dbc
2021-08-01 06:57:51
1
69
e4acc09018820b7a2cac31c672b7c77b2eb68bf70c3062f7528f8ef63582e9b8
2021-07-31 22:18:34
3
69
96130fedbaacb2429ac6fc4cc4f0bddbd549dd24b7d06a89126f6ece6dcb5232
2021-07-31 21:41:35
3
67
e297b4d55c0fd07f024c92c38de414cd8c78814014c26eec0597366dbd8b2f3e
2021-07-30 06:15:52
0
66
8528ae692f583493230f7e716900c2549c770ae205a84b57beea2e7a32a2ef74
2021-07-29 08:19:59
0
69
09f16fe1d454a613c1e029d9c65549dd5797e2fc8216fb99aa6e735fd7ba0bf5
2021-07-29 06:49:09
6
64
514ed2d1239214c9620bea6163cc6e684ee9a33bd0b02d50128eea23d97378ec
2021-07-28 18:24:01
0
66
4ab1f0c5297cbc82c032ec2aeb550c5c773a50cbdc02cac738c360b91fe76158
2021-07-27 09:06:08
5
68
6d47967988e1ad20a5d25a20384bb5ca14aed19b5ffe458efc5fee5bd363733c
2021-07-26 20:21:11
0
68
8d4aac9defb8c4288c738d5e8e392128d9ba5995738334e305301ab78ec2cdb2
2021-07-26 20:20:02
0
67
65ced41cb868e901096cf20793426b3fab966a34e03dc57b6d971bb55693a613
2021-07-26 20:20:02
0
68
62d63896de45607e66992f3665c87c7da8a0e6ca344dbed2ed4e6bfefe0d0fa2
2021-07-25 10:04:17
0
70
25ae4c0a8015090b51031e5e64e183da29a5f97fa3b6c125de3b2d7a41e9d4bf
2021-07-24 09:27:57
24
67
9066b9beb3e8753099885a1c76f602b88c0bcaa64470039cd955d3f975a3dc39
2021-07-24 08:24:29
26
67
27c68b6ab7a358c281bcb78d531960760d401a58249eff2e26f63e468828b4d5
2021-07-24 05:23:42
5
68
d28876d0dfe84edc2391926a4237ed2cb3a8df439b5a51231c3f5714a56abb50
2021-07-24 01:45:58
3
65
b9cc3c4a7388aa02450349e12aafb90717d1fbb1aa75dfd38e6eb0aee025f886
2021-07-23 20:31:27
2
64
f43b5660703618db8ce15363a421fc1de84fe8e6417c77336cbb81b616666e40
2021-07-23 20:30:22
17
70
5435961df1a7eef0a148b75ac3f06b2d8e0c9a7ea1475cb55284f2d66e713778
2021-07-23 18:17:43
26
67
c00919df2050a067cab2671860e7c51eb4b37bc21d84c4a61ca5c5e08b2a8ae8
2021-07-23 10:30:03
0
67
c2d993fe3f15ede8fa56a5ca357db344144b1bceb2cf12599c466a0ebeb2b6dd
2021-07-23 10:24:56
0
68
656c7638d3b9c40432b7a6cefefea48425892db588878c9fe7bcca9ab85fd49a
2021-07-23 09:49:04
0
69
9035f88894a937892c63ac9a3c6c16301c7ecea7c11cf31d0fd24c39f17c8c2f
2021-07-23 05:27:08
11
68
0009d4950559b508353b951a314c5ac0aaae8161751017d3d4681dc805374eaa
2021-07-22 13:18:16
8
69
1ccac97db84281ef8c116ac0a4fd7598c524df8ebcd3940d3ef27c869b165d88
2021-07-21 17:27:43
0
68
edf7bbcd692c393b7f6544d8f7510b6cffe9fa86d991902a127c593965ccee59
2021-07-21 13:11:03
5
68
319a50ae4a5f2b7c36021ad4578aa4872ff6b9563f657bbea8c01bc25a84b56b
2021-07-20 19:43:32
4
69
ecd85832b2fc6bc9acb489e909c130f3b98dafe7b7f692df453dafe303477834
2021-07-20 17:43:46
5

Rule Matches per Month (last 24 months)