SUSP_String_Base64_Jun21

Rule Info

Required Modules
[]
Date
2021-06-24
Reference
Internal Research
Rule Hash
5e3e89a350ad7547d633fc638e6515bf
Name
SUSP_String_Base64_Jun21
Author
Florian Roth
Tags
['T1132', 'SUSP']
Minimum Yara
1.7
Score
60
Av Ratio
11.65
Description
Detects suspicious variable name in very small file

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
10
Suspicious (< 10 engines)
58
Clean (0 engines)
1

Rule Matches

Timestamp
Total
Positives
Hash
VT
2021-10-20 12:10:22
58
12
7b5e3c1c06d82b3e7309c258dfbd4bfcd476c8ffcb4cebda76146145502a5997
2021-10-18 15:27:37
58
3
60a3a3bf09c64bb082eeb10fc5453b1e9deb263ce32074359d8d408f63064774
2021-10-18 15:23:44
58
6
d367cb30ef72d78ae92dcd7e26692a55562dc6f993f446e49e3662e4fb9ceea3
2021-10-16 12:17:14
56
11
969c67d212e9eefaa393b4567ddae21330940d3ae64dfb4cfe91d88de7d0b984
2021-10-13 12:09:41
58
6
2627867d2b73699c67bc979ccab4914b0edaefc7dd748748e378a303e46f7859
2021-10-13 11:30:22
58
4
428ae4298404a9cbd3f291321fa9a4ae6802639d85f78581c2799b019f099465
2021-10-13 11:29:10
58
4
f47a05fcf52c7b91f8a8e4b5e08c6eae9d0dcc38388f3657938698472b43dbdf
2021-10-13 11:25:05
57
8
48db09e78815df4ba530d163f6c9d9ab56206f44d51e562efe000a8ac0a8bc9b
2021-10-13 11:22:34
58
3
585d7776f4687f444763db220799ac65f9ffbf10461deda7430d9cb7dd8dbe34
2021-10-13 11:22:26
58
4
e7134df4aa1a3efe41a5e8d2ef6848e08c4956f7206bb243dcd3cc90577717aa
2021-10-13 11:17:22
58
4
66eafa54f3daa081c04387570203ee48b5fc0dbb07d470767668ad24c94afc93
2021-10-13 11:13:29
58
8
bfc0c6f3604a35cb4e6482830539f9b52e128026d9b59204731624dedfb173ca
2021-10-13 11:12:17
58
3
c6553959ce570dc770349fc89c90b9743dc7c75568e26a12cbb56db1538ddd12
2021-10-13 11:12:15
57
7
631948e798050af06539294e9dd20ab03e98380af646890309a941bb77442731
2021-10-13 11:09:41
58
4
f2285feb5dd2e215b74279029b0cc6a73bac0be119964ea1e3451dc5c42e6fe8
2021-10-13 11:08:22
58
11
27f478858cf5b076bb8c0f81b3b1eea50582ad1b4d34b9436ed07033e634e750
2021-10-13 11:07:05
58
9
c5ef5dbec391ae03f2dfe16c179a4571ab0b67e4b47f776180dd7fa4fffdb790
2021-10-13 11:05:52
59
4
6c88c6579e353f248328de194b4f6fc003f51a64ff4f7386a63a981722b15fc9
2021-10-13 11:03:29
58
5
63737b1400174430ca0f936905a2338e49f815928e39de8dc5b9e8d0727233a9
2021-10-13 11:03:20
58
7
458bda00113a3cd0c0cfd080b1bc20f29915e7d82f59fa88f380077c30b4f5d1
2021-10-13 11:02:06
57
7
87cbad1477b66bd01ef407e748b20a915eadce5123856b7983bba57f3fe0b0f7
2021-10-13 11:00:59
58
4
1b1970e77592fa3fd4a480b5731945ce2dfe509401b67a85df5b728bd0e98cf6
2021-10-13 10:59:43
58
3
bfef1dac803def44b33d73b5fd7bab9c60f7bfe860bf09ef49635a3d40b3d1fb
2021-10-13 10:58:11
58
8
f80db929f87f5825bcf2b43ec5b8e101484a767756c2605251e2d7f634cc738e
2021-10-13 10:57:03
58
0
927492c795705fc8505f967b55d940ceafaa3b716e125ed0edf01e8a2cf8916a
2021-10-13 10:55:54
58
13
2b7c2c54d091a712643a21f5acfb9271f0421ff45c690f5bc8c30231069a9ac4
2021-10-13 10:49:38
58
9
fe709b18ed3d3988359bf6d92693bc0a81100992c3537fe07b116678a828b8bf
2021-09-23 03:42:40
58
8
20808bfc0ad462416a690b76ec79078629d87a66d7419ffd3b0b32aa7cf815e5
2021-09-22 20:22:52
57
2
a22715106d0ec4e360e84ec3b26ababa71fe369c5d3a95dc7afdea1f7b44e59f
2021-09-22 20:14:43
58
2
d76c151376af9370b475ed6584e141a752af44c4c539717461880d8105209d03
2021-09-22 20:12:34
58
4
3e72c2bb57c37c6f8be173c428eca0add2c30f83322aa375e6da2ff0eac7b2e6
2021-09-22 20:12:29
58
5
3b0a3853892c75627e43dd50ca7e34fe2eaff5b5f401e97402291ffee0dbbafa
2021-09-22 20:10:17
58
3
f98b0b950d159db230bd093bdef677bbeb346ed2b89290ad3aea6a369ea46e55
2021-09-22 20:05:14
58
3
376481c0fc445e156ab41d58096a7dd00dcde8895f7e8366a3561361edaea3ac
2021-09-22 19:59:01
58
6
6c7217ab9213c2251a707641b803fefd037349019099a0dc91f24a2312f18c67
2021-09-22 19:57:46
58
9
3ea5739ca35a3f65a9d1dc2255b8d3d135619b1f425c1f38287de3e60e07fd77
2021-09-22 19:56:38
58
7
1e0f4e31448ed0e508ecf7392bd8fc21f4ecfc4531eb0524db298456e8b15b75
2021-09-22 19:54:22
58
6
14b7a6ae2816c6a42a9e2f091ccdd46decc3a02a32f9fcdf9c8aa3d1279f0a05
2021-09-18 05:22:11
58
11
e0857fded1066b879841ecd7da65f951f2695e3d2018987982c33d62be51f1b8
2021-09-18 05:17:59
57
1
141a66a64c226b6a5b674658cc90e8a3af1a7570568906bb39954262f6c55f34
2021-09-18 05:16:49
57
4
bb353d3db81e39396a1097890b1687557039b81de2e82350172faed52a4572e7
2021-09-18 05:15:47
57
7
8329452850a97dbe76eb84e8b776385fd3c701191091720f0a5823437d552994
2021-09-18 04:27:39
58
8
2ab1bb1af13ca6754e691000ffbe4ee07ff0089c6413d855501a2abc85e9ac84
2021-09-18 04:25:33
58
9
5b8e719b2f2dfa7b7648f1c96d1a62d25f3c1f65128cb64dacae33a6ebaac97d
2021-09-04 18:54:01
57
8
3c09739afdcefc7700e3bd48db576cc4156934c9556d6436e7aca7474ef638a2
2021-08-30 13:58:29
58
7
5215a82b96d052e8bf84121173a07a0a96995eb90c56fed79061b95f8de8b40a
2021-08-30 13:42:25
58
9
d8077b5d77daae72b9054622f2499b7d891deabba76bdae6bf8cea19f18b1f8f
2021-08-29 16:11:55
58
10
fec577f9a1f50b619b8ca2153ce021f0aec978e8645799d997fab4a821646927
2021-08-28 04:24:57
58
8
65263a2d2e91bac87f3f54c11e5f024b6bce4fdb22bb8a23543658473c3ecc10
2021-08-27 07:19:51
57
9
6abc7df04d2c19132f116463982f53f0fdc3fbf1a1568ee7e9a054ea59119b08
2021-08-24 19:30:09
57
4
18ad181bfabb09e99f7ecd59adde30d66122107ebfbf304647d1f3bc5618884c
2021-08-23 12:10:55
58
9
518e0bfc8feb94bc601098971f01f1c5fb930fd7215ac975a50ccd84bd16c3ad
2021-08-22 00:43:25
56
4
2df5b1d66b04f2895bae8d9b21b045f394c9876af49a9d1c3f055b1d7d3d0516
2021-08-19 16:37:42
59
3
487d8ccfd2efedcd4a57b351772551b9aacbdc3b5b12ad557cc7d23f7368bcbe
2021-08-13 12:33:39
59
11
dc18834e1aba6a68086027f887a6683ee2776549b0ebaae5bd2d248f970a0b50
2021-08-13 12:30:05
58
4
99b1459d6ffb17d54482227c7c0ff9ec63a2149d41a43d14e2a8d1721f6ab736
2021-08-12 16:12:45
59
18
0bbe4d425679143b27efd4543b772de91602be6c215bfc5e043058580ea40a31
2021-08-05 16:17:19
57
4
50e65149676c42d9ab9ce645ef01c5569173c22f7af85fc11db6acc9288ec542
2021-08-05 11:21:36
59
8
9e6e9a9f732cc32668e4e286fb6a7fa9b56ef500221a08e0b98c5e6f83d5410e
2021-08-05 04:30:27
58
4
f66ea02bdd959911f5a158e555c4ad29a4a0b0279b6f48b5de7748fa0ddad5dd
2021-08-05 04:27:18
59
9
d2cb3d84e6750144b611a3cd2c44ebeb638b49c6cf2368e5ac35fe8a6b80aa4c
2021-08-04 07:45:18
59
9
b9ea613bee0899e0d59ce5e533a4ef10890e83fa35b4ce7368f855751f42376f
2021-08-03 13:21:39
59
1
f530c6af1c975132f452a293dec22ec7d3954e7341db18c6d2ecedabc32f0999
2021-07-29 20:21:19
60
26
406b680edc9a1bb0e2c7c451c56904857848b5f15570401450b73b232ff38928
2021-07-29 17:31:32
59
9
36943ec284b9e3fc6a55d20f82b2ef1f10b0ca2b156ffc3bd0b09dedcab8786b
2021-07-29 07:26:06
58
14
fdc2ff312e3e2355108873a58b74fdff936b525b71cdb6f3f7f6ead77e883982
2021-07-07 06:13:03
59
8
5adec789bf569da9ecd286e11dfbeee71945fd108dd29ebbe26b6d25fd1a0db1
2021-07-01 13:20:06
59
5
2e639495475fcf19b7388f35f9933f9a58af454ac79f98f40a14df14ae590b1c
2021-06-28 17:23:47
59
4
4b4a680aa51bf2480383a3ee96e05aa0000e0d054bf0a8abb8b84866d9dbd44f

Rule Matches per Month (last 24 months)