SUSP_ShellCommands_Oct19

Rule Info

Score
45
Name
SUSP_ShellCommands_Oct19
Description
Detects suspicious commands or keywords often found in malicious scripts
Av Ratio
10.97
Author
Florian Roth
Tags
['SUSP']
Rule Hash
20b067d99e3e97c6fba0cc434bdf4486
Minimum Yara
1.7
Date
2019-10-07
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
33
Suspicious (< 10 engines)
52
Clean (0 engines)
35

Rule Matches

Positives
Hash
Total
Timestamp
VT
1
a13de8f3c852f06fcbc6529576d3c5fbdb2d35ab7c3d56c5394969c52ffc6ee2
57
2022-01-10 12:09:07
2
3095fcea4b677659d6c15d71f95ae3cd77e2cefbd64caa310edbb3280ac6336f
57
2022-01-10 12:08:34
3
82562a803f8c3e8d25a6dafad3a053521369d0ba27eb2728796e608d72ba108f
56
2022-01-10 11:53:29
1
56140ae3ba6362afce49bbc2b383b29695f8341d9ddf39298ce132f3117a14a0
57
2022-01-10 11:43:40
0
1931eb9a900fd9717a05f2d9e65d4d6beff15063e72b96384f858a5ac94c611f
57
2022-01-06 21:09:51
2
954481671c65eeab839284f37690c4f11849687ecda22f9693f10727a0a0e749
50
2021-12-26 17:28:36
7
a1cdc2a3e036155c5a8ad6cdbd981b639e213de86f1ae60adf65c95f2a88ea66
53
2021-12-26 17:28:36
5
fc669beaa2f84e08fcea799498c85374e1a3406441ed9aa5d53b7667265bff41
54
2021-12-23 18:30:40
6
cb6daf019f819320f95c1943f46f4f80752a35ccacf25ff5b776cd3a081c19d0
57
2021-12-20 15:36:46
5
daebc1cde6af5d2cc54c81c60d67d7d7daa8647d6c45b8c50cc4fbfc3a9e3c54
57
2021-12-20 15:00:33
4
4a249f05a84594a7dea4cc227389be454f2b021084c73b3301e081ca7be5f13b
56
2021-12-18 21:31:37
5
3cc5164b991c09187bc3ea44b9463a1da5b465643d23b4eb51b44290e47f132f
58
2021-12-18 20:28:35
4
771d794d6ace0a85fd384c538a62054f90df337fa34fd85add47d1578f8f32a4
56
2021-12-18 12:30:19
2
5d017f1cfaafc8c825a45a6b0a6daf0c9d26012ec640e3c918b718417d226713
57
2021-12-14 23:17:07
5
a290b6f956ecdb3d2d2019088f0b01a93a9f680c82a4680c0fb87eb5e3e64897
56
2021-12-14 01:38:22
4
ac8f86909b45f36d7ab862081bce71676b1e90b5c22f195d359a023eb7bf2589
60
2021-12-13 08:30:55
0
7d143d0dc673f893d25d0a0a591a665e1dc95c7de7ca903e3a14730e8f8cd8ea
55
2021-12-12 22:16:38
3
0f5cb7f8c43d3ebf71d7e22a2ac2fb94d0457ffea870daa2c402508caa39aca8
56
2021-12-12 15:39:08
3
d59dba711478b6c6fdba87a9cfc9af753783c4d9120111a9ef026c9362a8e74b
57
2021-12-11 09:41:23
1
ce91eb2b02383dc14312608828e101949c8bd4b5938a7be5a3d52e5e99e1e16a
53
2021-12-08 00:52:44
0
5d7e2a79f6e14a5a7d97a0ff473b1bca102a97a49a760aafbd52f2a983cdf1da
54
2021-12-06 17:22:08
2
31633aeb68b651615771300ed6caf6f6931d5745d66bd05bd29bfddc43d9c306
56
2021-12-06 06:19:09
0
de5fe166901887dbf1ddb6cf14efda7aa5bcdfebc979cbaf630a0b54a254e629
54
2021-11-17 17:55:32
0
c1c5c496bf94e1fdb8439081feb447d7060a026bb1512910d3dfd6f99aeef8ca
55
2021-11-17 17:40:51
0
ddd150fec762193ca11b791a2d8a3ebcfc88c81e820512df4dacfdeccb2d9b1c
56
2021-11-17 17:39:43
0
ad57c0765c4a67a76b44ac82ef42f39890538850017b99acc181e4c438ce2c14
56
2021-11-17 17:38:40
0
d062993ad901a79d873e05532c4e28d9815aa4cb5ecfe3133814deb0f31ad7ca
56
2021-11-17 17:32:57
0
0a9b70b88154fc641f7a31b60c3fad1c87ace0b6e1e83561079426e28c65cc40
56
2021-11-17 17:29:35
0
b1f7b8c3d818accb61c483a18aadad1936c339d1206d8c814ad72a63e83d3506
56
2021-11-17 17:21:25
0
57830b05f1836ed000a8dc937cce0c4a3d861df368e011a305afaf5e41e89547
56
2021-11-17 17:20:20
0
c7a8989c5a6b39a57fc3049b58d74cefe591ffe79894a71fbbf9e0cfcaedbe44
56
2021-11-11 15:16:02
19
f9073b79d53a13509d5dbc0253de1add07b7bad3c928117850cdff9aa4b73a3f
56
2021-10-20 14:06:21
9
5c46098887e488d91f42c6d9b93b17b2736c9f4cb5a4a1e476c87c0d310a3f28
56
2021-09-28 09:43:15
15
d9f63cbda05500a8e29a201b4d7276f11e6221cead89410d441e3cc99e09e01c
58
2021-09-22 20:15:45
0
343c35b87bae0a70d5f679029717acacc78161cae893aa7cca64cb46b066e1b3
57
2021-09-21 14:10:40
0
30cbbe507288cf70f4947c0f4ede38583efb1bb8e8d8cb6fbf69e51c3cb83915
57
2021-09-19 15:06:07
0
a91dffe65048e39dfe1fd8da0b0dac11807718cdd5efedf4206a18af78779b0a
57
2021-09-09 12:59:24
0
c4fe630cae9740fa3598acbdcbf7808b6c9d27535ab2f68527135752c4870c9f
57
2021-09-08 13:50:31
0
e03ab0d6cdff2589dbce5fab3333483cc9801ce3ee9d04e9cafd7ce2a0299ae9
57
2021-09-08 11:30:50
0
9b7954fbcde4557ab666c03c99da9c76fc87e96c610a87e800e4ee48b4a64845
56
2021-08-25 12:25:05
14
b304cd481eff2217278e8f3489cb3f72f81c4586222fb40a66a41a053e2175d2
59
2021-08-12 21:04:19
2
f7332427d4dc5f2c4cbce4a21f0825685cdab0a70d2e8940ec643c74cf275673
58
2021-04-03 19:31:02
0
b3468823f7fbd5e60b68058355f9059fed35c29db94858d284ba3f449733e973
59
2021-03-05 11:52:48
1
77f7ecb56081c77f0348180def2985120b10b929e570b05b4f152aa7b9de2c71
59
2021-02-22 22:53:19
1
cc091005a05dfe322da99b03b595a25589482ace3a7ed73d9ead0efee039ea91
53
2021-01-04 14:42:30
0
67abf371dfcbd8c629c188bdb55098633580f729eab61b3d29fb64370d9d5fb7
60
2020-12-04 15:38:52
2
7a555dbc9806a5f97a2cd7907f7a6905f41e3dc1a136ae5a0010e306f2272a5e
61
2020-11-11 17:51:56
0
639cf87bc97dd547e29a64635b3eb0701e2ac84cfb46d46684b7e750b346f411
60
2020-10-27 02:36:49
0
d2c4ce502994aab8458019ff38fa1906774492a13683efd4a2693dc0eb51ba63
60
2020-10-19 13:49:29
0
6950019324caa2d0665e4c698446287062ceb43a9f963c4e6ac9f19d6ba8003c
60
2020-10-16 14:06:45
24
60e21a3db886af022a8d98e4bb016ce2f0d7905f1b61577f613c9bb5604bdcd7
59
2020-09-24 14:53:44
19
0c5e960ca2a37cf383a7457bcc82e66d5b94164b12dfca1f21501211d9aca3c9
58
2020-09-22 16:22:27
17
dbd5ab0081acfed3ccd916ac9e046cc1d63d11dbad922bf7dc0f5b65c121655f
56
2020-09-15 19:22:24
18
8ca6f82cbaf5cf9d70d93f22503ca597a8701d7265169ff0e37e3ac022cfd94f
56
2020-08-26 05:57:45
13
4da257997af37beebe474a7470033c862a2090cbd56d3f8c09e4d0ab3f478ed7
59
2020-08-06 07:41:46
0
c388d3398b4c88ff811cbe1988b5a6fe5a79d4bab91f8d17e7331b6ade7e0184
59
2020-08-03 01:15:25
2
07c82033ff029cc400e916ba127ddcdc6787ae7969cd8e9c52afb40239b2c560
58
2020-07-29 14:12:00
0
10f5ae1337aea72fd7c25a6da298522144ebf601312db9cb2df566a5449b8536
60
2020-07-28 15:07:45
1
a5d14cc2c571cfe40dc3be6caad9471d496f6402b5e392dc1dd3b4b9ae8d5a61
58
2020-07-21 10:41:39
2
4edf90159712dbb239301dc8564e57f5c11fd8bf5878f8c2df196db255ba7f5a
60
2020-07-18 02:09:55
2
484c0a5d14060810040439bd7ec0c51760b6beffcba6ed8fb600e10b753d866f
58
2020-07-14 14:21:10
0
2f5a0689ae6b4866150ae65a053c8f15be94d075015b80a63058d0d902a82254
60
2020-06-28 19:10:29
0
159617f519d07e26ed8ed2e4012d77f4f5d002bf64cccdd1fbf25ee1183ded63
61
2020-06-22 13:30:35
3
77c168dbe5db6eb916e4606937d1e7f5be6b176e595ce2d976d720a927d8dcef
61
2020-06-21 21:47:11
14
b9dd12c115c9e6c28a8fa1e02302652d39bd9cff3945b9d30a78080a55d55ff7
59
2020-06-08 15:31:59
29
11a3705ec211ee8bddb3175cb1f8b0917951293d562c81b907a979efbcf9b22a
62
2020-06-07 06:37:33
9
121cea11c75984749d140621e512a6d72a59089667f5d3f6583361485473c321
60
2020-06-06 04:04:11
11
f4c62cdce72ea5f012423aca26fcc54a2e100ff0cb49df95d06be8a36f8f1b59
54
2020-06-05 10:43:13
10
2b1dd825a7b1a252a77d525f50a44a0fa6f1c36dd53dbd172cd07aee88f7c1af
60
2020-06-04 12:04:43
18
8962d85dcb9a47364bb3f22153543f99a7fd10ed8b06232a7321d2f30dba5d76
60
2020-06-04 08:49:00
13
f3b547d66b2da442487f9ec23a797685381b24c0f9ec9746e718220139affd55
59
2020-06-04 07:01:11
6
6e908a940a78af2f667e751fbc5a5c59775cf39d4500d731af3948f67fec0ba1
60
2020-06-03 10:15:30
13
9293b86fd198184993d77fef49e78612c95e569d0bc58bed84158d3c2f11c6ff
59
2020-06-03 09:46:28
4
c8e47148235c06961e0c01c88333bf7a232edb74f7317b7035fd9b3f0473493c
60
2020-06-03 09:32:23
12
ae457517899fdf3bfc2116430bb79757ef3ff767d9028e8f725d1d5e426e1e18
59
2020-06-03 09:06:26
7
f4a33fcc93b6fd6ce2cceea48b09c87c64fb636ed0d4709803e46ffe6606eca6
60
2020-06-03 08:00:46
4
486282f64ae33ba02237df17604ea576d753c783200d3ef7162023cf37997a9c
60
2020-06-02 11:52:32
10
6acc678538d0301582fa7b453356952c00d9f573125be1cf41eccfca951a8950
59
2020-06-02 05:46:38
12
c3d1c24f867adc4332b6cbde1ccd5c53c9a3554884fa404b783f34329b248208
59
2020-06-02 05:21:10
7
c887eadb6b51b4d64994f417d51195b17641921262540c95b7b9fadaba12d25e
60
2020-06-01 10:40:38
15
ca73d7da39d3311b1e3e8bb00af3826c19b294e73707dd515aec93d6ca87d5f4
60
2020-06-01 09:21:18
6
a6f7f9a63b07f84e417254bc2a2dbcda7f2c88863af247091c48c07d8461a7ee
60
2020-05-31 06:56:23
4
b0ee68d67cca9373f95736125ff557dacea71be7aff38123e87cb9c4f69fe8ae
60
2020-05-29 05:18:55
4
1176297468a4388949b534c157fa910c0b1c576b1db32d23ec9b303882cd73fa
60
2020-05-28 16:39:29
14
7044059eb3dbeaec3962523710990fb09710740f41bed0b0088de06c3c085aff
60
2020-05-28 08:31:25
4
1489e238cbfdc19fe67f13d420125b4dc5de3e384420eee477504e8db5f568e2
59
2020-05-28 07:22:56
27
6f48ef0d76ce68bbca53b05d2d22031aec5ce997e7227c3dcb20809959680f11
60
2020-05-26 18:12:48
21
78e6fbe7c73977be77dfcfef5e1b697aed698535b5d9e25f26b5934619d75ca0
59
2020-05-26 17:17:44
4
934960b9c69e3505b6fd666e92992188ea97881cf0ffe90da47055fb2bf3c9b8
60
2020-05-26 16:30:47
6
6ce52e935da91b62471c110807d013306a88f72731532c197d701c49157d5abb
59
2020-05-24 03:30:00
12
b00a08661ca9c52d0d0f55a571c95ec3175d1e2d2f428acf710606b106929640
59
2020-05-24 03:28:37
5
add87038cabf5565068921d480c13cb0a151c199907a4dd04e65ddbeb0900cf2
60
2020-05-24 03:18:57
26
ec328481b9c5ce159e7d12d18cd9a78be09fed8626c7c0818b422321541f61f3
60
2020-05-22 10:21:06
5
9a079ee7366ea5f49e7ba40d52c4e92fd867bdeb08d6653e2dd534097228eebd
59
2020-05-21 11:17:15
16
dbc71be7eb1197c3c95c6094a33fa3e8c7bdde7725d77fd8526619ce9be10050
60
2020-05-21 09:29:40
10
09887044f837946d3fd4412d8880118908344504f11472fa031f1e6ac6c64bd1
59
2020-05-20 13:30:20
10
1a7e9317a2a0a2f7d4340bcc375fa6ea9f7df596617e1221c1dbf8f4216a0381
60
2020-05-19 07:15:52
19
11adddf971c9f2477cd06b1682e397fc894782fd4c6a636edf5fea5fd2626223
58
2020-05-17 19:28:54
15
55ea1ffedf5a98dac97601917a3013f388fa82ea7ac4f4663b593ebf65c8f6f2
57
2020-05-16 12:34:13
4
505aa0310f36fcb4b75ad0eb0203b8c6f1b2cb1c43c71870a2a0813af00f7cf4
59
2020-05-15 11:30:58
12
ab78296d31e58f6630635c0d6537ab5aa9de4141e420e47885342d5e2d14e283
59
2020-05-15 04:12:01
7
7a52862018f7c072ca18580a6604834a3f8550023b413e81e8436e64d3a10112
60
2020-05-13 05:16:14
0
415b60c45938c96f59f08a13eddd6e85ecb122d2d0785265f756f32c601144a9
59
2020-05-12 11:27:22
1
07d350277d9d5667175992dfc6e10eec4fa4f46a56e6d2a697b97c964be30a47
57
2020-05-05 08:48:23
1
a226c6a641291ef2916118b048d508554afe0966974c5ca241619e8a375b8c6b
59
2020-04-27 04:12:29
0
46014afd489e8c5cf89d784d2333aa2d8e1d84645b1031bf0813c35939686e2c
60
2020-04-17 11:30:08
0
a2f8dc253e2d52539975744a417ce50dd7b014ba2995d83ba256c522cb2a05ab
59
2020-04-15 16:07:47
0
a1289880665ea3298fcaa23945bac0af5ae6a14d3f1e91d225c727440ba48b4a
60
2020-04-12 18:14:15
43
7c403ec3458e5bede936e1a1e7cde2a6f7a9cb287899e6e2ba3ad3685d3426e7
59
2020-04-11 01:27:58
0
df0ba2846709a626558c2300fb6f9cf36bd950decb369f356dc559091b70e878
58
2020-04-09 16:03:56
45
bd530d3bcf208a8c570aab929a4614bd527fe46ce63b53eac6afafcbabb9d347
59
2020-04-07 04:30:58
0
2249d84aec319fcc8a652f99b5d79b8b10e4e2a4a96d8dedbce37dc32498211e
60
2020-04-01 21:14:39
0
4d66014ba295b29db21420121b24f388bda22dda2f1dc59236672aaaaa39f196
59
2020-03-26 21:43:51
5
cc67c8f7636c962bceb7f7475ce74efdc64037b8092f7dd2a13a417dc81697e3
57
2020-02-06 10:16:08
4
9d3d5772e72912c7392e2f5e8ef42351e0b6eebdb06960c082c5508d0da16a6e
59
2020-02-06 10:10:06
3
2548f5b1613f6ebba2ff589c7b3416ccdd066b73644d4d212232beb1cecd9c31
57
2020-01-23 16:06:44
1
f6880c626a4a05554cae9b6571e28622f2258247fb404656e9e4003037a47238
56
2020-01-10 12:19:19
2
1b99d60db9b714443771b1556b8fa722ab99581e3b7e4a5e989d66919f4b571f
56
2019-11-24 19:18:39
0
d67c281bd422e6df9b8f6a0f16cb79aafb2d5fb90a0fca619973cadd723dabab
57
2019-10-28 13:25:13
12
5c1439c0db107cb5f3a9b9c239652b26935a2badaf1d840812702267290ebcac
56
2019-10-18 01:12:38

Rule Matches per Month (last 24 months)