SUSP_VBA_User32_Import_Indicators_Oct20_1

Rule Info

Tags
['SCRIPT', 'SUSP', 'T1027']
Name
SUSP_VBA_User32_Import_Indicators_Oct20_1
Minimum Yara
1.7
Rule Hash
684aa0c33657ce7fe11e56995dba2fbb
Av Ratio
1.36
Score
70
Author
Florian Roth
Date
2020-10-06
Description
Detects indicators found in obfuscated VBA scripts
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
2
Suspicious (< 10 engines)
22
Clean (0 engines)
94

Rule Matches

Hash
Timestamp
Total
Positives
VT
70eca3686c7376d4186650d680f95afb53df845f7bb791c4f300fb0a7a436115
2021-06-04 12:01:58
58
0
56623f4635318848ba0d26c5b37d7d106e37715c62371470a3dffa3e713da5d4
2021-06-04 12:01:58
56
2
b4c73105315370221e183f8b7d6234d586f606ba723acbfa60806b432eabbdf0
2021-06-04 11:36:19
58
0
b26b2a5177ea426fee28690775cb0ac9ada90530fd4b67ae5f83f3169321404b
2021-06-04 10:58:04
58
0
4af10f22e01c7a4e4598f90efe64881062c971c3d439f4f5564339ffd19ed5c2
2021-06-04 10:27:24
55
0
9bd9b4d3e091ce6a2b9a877d3a218a90e705a4e08cde0b2b998d77ea3ca2eafe
2021-06-04 10:20:40
58
0
48682791fd3e0230ea05dabc8eae80d0b688901dd6b36ee878a8f06c8fcc17d0
2021-06-01 21:00:52
59
0
4996c19665ee7c4ce8b45ae61f272e4fc81138168a70b84f4998fa3db68c47a1
2021-06-01 20:57:34
60
0
f347d8a71132366d57ae445c1a21100d70ca1d757a9f5b9acef03376db173757
2021-06-01 19:12:46
56
0
cb8890fdcac6155a58f665f4ce1475dbf49c85d9311a64d868a9aaa3fe806cf2
2021-06-01 18:21:21
60
0
1b6fdbacfe8d90614bfb32fb01b9fd8290f24008ebbaf2c4c968f2c5da4f9b6b
2021-06-01 18:20:02
60
0
ef8932ad93d0c2ed7dd2514fdd53f62bf6640f86916f54b316df598ec43c0ecb
2021-06-01 18:18:41
60
0
b29f9c2ef0e2a25c48338a15a2914d9a158dc1ad310ede9a6e34def388302850
2021-06-01 18:14:32
60
0
47d363fd8c832475c50b1d7730dc77ad45f0ebd304c2e7e090836261416512f9
2021-06-01 18:02:38
59
0
c3527da20425b61cfa1346b774d70d1b7b089b8e94a661b828b35e029896a2ab
2021-06-01 17:50:10
59
0
aafbdd1bc12ba15e58be7777d96e3d0809bd3a5f9be6b8a176c56ae7ee31f04a
2021-06-01 17:50:09
60
1
f912822e9be057655528b4cad0ae841963bf8d26aa98a8c3b4e56c34e8821356
2021-06-01 17:49:07
59
1
0b5d4645cc4e90f879592c5521e423a463cbd2d8da1fba431f5c3e513ea1145b
2021-06-01 17:48:04
60
0
780848e57f8c070c09e64bf57b03b899c1029bc9ea7e35c843bbc875c2a47aaa
2021-06-01 17:45:57
60
0
aceec1195e95c708346ae64e5d988d89fa493ac5e840b9a887aea0dbfd3fc396
2021-06-01 17:42:42
60
0
e87d9ab8f7f5e75820bf5b3f73afb04d14fa7bba1c559d08d592a6f453c526e6
2021-06-01 17:09:26
60
1
3501d07271e909b449f0ff3fb46aa886c6ded861b6d2b5b3965f4e84d7ff5103
2021-06-01 16:59:38
60
1
c463aba1919ffbfffcd40bdfa976e16e2acd1e7d048fa439826a9e9b23682e57
2021-06-01 16:56:28
60
2
40d60c489193d6b791ff7714d4e75c2d0f4970a4de1f17b07fa12bb8e23ee668
2021-06-01 16:24:15
60
0
d8a645b2e5b2ae6def46c0538a8ffbc4709012ad3e647cb46fc0f7d463106d02
2021-06-01 16:16:48
60
0
c824536a60cd440fdc1a99f75b0f6546be03c3df607e30ec3ba489bae3840710
2021-06-01 16:11:24
60
0
6132f2ac265bc7e77f8a1457ff4f1d6b3b32d8c7f102829b4cb146e610cf00cd
2021-06-01 16:07:01
60
0
0e42b7adb96301025f90aab9a2aad55c310d6b19d952dfe747b60d1207570247
2021-06-01 16:05:55
59
0
fe87a6a8e10c1c5f3aafaa1c2766ff3cf0a155b2a6c4aeedc4a1b42d84fb8946
2021-06-01 15:23:04
60
0
f4038dc29c090d96c4fb16e18ed2ad9f5b76a8f01a569d9e243627604e0a1860
2021-06-01 14:48:41
57
0
27276bfc5b7aacb6010002e4de9597230f9d329c94c7cdea1c46b1e80e3776a6
2021-06-01 14:46:58
60
0
98bb2097bbb07accf7d4c6186e3492ea9e2ef6f40940a80802a735b88ca13e89
2021-06-01 12:20:19
60
0
ca9055b516c5616ddd388dc0705f0e16f1d4ca874e99461612ff8e0244affcb7
2021-06-01 12:11:15
60
1
35f9bf0d05dcfd9c70e678c4fbb02075c2d419ed7d2d9293d2258bf429ccb9a1
2021-06-01 12:10:08
60
0
3178da0d47696b800edd66f94782e5175000a6e54460b3210e6f58384b10fa47
2021-06-01 12:05:43
60
1
cf9885f81a5169b59a0035b487fa8da53e3f9bec0fdd6b25d864aec4e39cfd04
2021-05-29 19:04:12
58
1
9904db2b44190fbfd3c434045bd5fcacbf0b4254c714223127d9903244ec4f26
2021-05-29 18:46:14
58
1
ffa0071ea894f8668cd192e689b69acb18fe98b2191e1fe5c1c01db546cbc34b
2021-05-27 00:34:40
60
6
9526d467f757e84dcd6ab60f93f16a8fc4332bf67e3684d9a6ce31283da95b52
2021-05-25 17:48:28
60
0
1eed5a4f2efb847205726db34ac49489c21a16f7a700f2792199b3d2bfd4b032
2021-05-21 14:49:29
59
0
3ea79403b81a6bb7a3d82fa19615b9761d700a20e0cc7c246ed93404519e98b6
2021-05-21 14:48:24
57
0
513473dc1175caed9367963a369acb4753be4817bfd3ed3f1dd9cb68ce2f589f
2021-05-21 14:48:24
58
0
762a43a44c0abbf1b62f2f58779a2ac8fd3e02d5514aaaece2eb66571b604de9
2021-05-21 11:35:58
58
0
7a3f22d88a4b366828fee0f38fde805062aa64216fd0c5096160a92f148f60a8
2021-05-19 11:46:02
57
3
240fc69e6d4b16368ba1e727d37b92e94449786b4eef89835e785a71ed5d42cd
2021-05-18 19:23:26
57
0
e7dfb739df86e44113c8878d86816c5c7e359ce9d9761bb9f728c256517e2b5b
2021-04-27 09:31:44
57
0
59f6dabeba1821117b0b9a48c694d3fc74ad6e005f9dc03913077f5ea4fdc934
2021-04-27 09:30:49
57
0
87c5271da6d2f1770493742b2390744decc047b4d95959ab7c8ad6063a8d0ed6
2021-01-14 12:18:29
59
0
b06af985e8fae34365a0f14995cbae5fa2f291a9f82f3a0cfac94a5b93c69304
2021-01-12 20:55:06
62
0
f5c79c0989bf7e48013e8140c8e63d90379ce189699d5af6e0e86d4bee4b5980
2021-01-12 14:30:15
60
0
cd09032762719a35f307d2e6d6aa5b28516ab741bc50ac084d8f5c960fd0f356
2021-01-07 17:57:04
60
0
dad6747f31bf0a7a2f55c0bb31b9e737cb63a98b8a230efdd11b68c8dc2bd36c
2021-01-04 16:54:52
58
0
dad97c53af0f5ef92c6dac28e630883f9bc69830baeac540843deb5af3f6463d
2020-12-21 17:44:27
62
9
7f8943ba0a307d6490480457b1c8df8ba66dbefe2d31f081bc2d132b33097400
2020-12-21 14:11:23
60
0
d3c197c0225366c3e0746b70a2f087d8e53928604d773082e48ccf563e1fcbcb
2020-12-21 14:10:14
60
0
b0dbfa6b9213d79617dc577101728527d06a915021ed428dcb0fac24328c3b87
2020-12-14 17:33:14
59
0
79441c051d5b77dacf2a627534017e96125a66f01822766b5581bb2a4552188c
2020-12-14 17:33:09
59
1
170c6e5434afab66a4fb193732e1bd35dc72d12ec3a1996856b044bdffd313de
2020-12-14 17:32:33
60
0
3ebedd3bc648f0da3449e5abe75ffb0b505efbc05b2568e403687e0b308cf634
2020-12-08 13:06:21
62
2
5badbd2794bf79d156e756f6162f62014dec87f2c19ed838a7744f22fbd65303
2020-11-24 09:19:06
60
0
2ddb0e1f262df1ad61b6af2ea663357179dbbe9f3c45c3acd613fa082b206ae8
2020-11-17 17:24:26
61
0
1f5c22a415969ee0e89159575a0562fd0d53fa1d72ef112d4289524e77a8118f
2020-11-16 17:23:21
61
0
312d2863af77be2e3fd6170b07c18b900cf8e48e0917d2bfe74d3cfd4ed1bcf7
2020-11-02 21:39:35
63
0
f2da0b4cc71f1ad53adf36efd5c2b5e750a224bc8d5a1a4d2f87c9576dd53d43
2020-11-02 20:56:53
61
0
4325e6f0045ec1aa78ca35385a77de24a7075293437e0e074030fe83318e67b4
2020-11-02 18:51:10
61
0
b5a0fb7934eefd027d00fba599ea9c757dd1651a48d79c28d234a58a095f50cc
2020-11-02 18:50:19
61
0
7e4bc687d2218e74a7a05d58202969eab0069de5b6f910df76d4a3f1c44ac9b9
2020-11-02 01:54:36
63
0
9fd7d63bb1fc2b90e826fcf89106a260cb09566c51042f532c1a41e18aca1c80
2020-11-02 00:58:53
61
0
086a65d5b112e12fcfc236f16773fcf430ae795ac7225d6548efa0eb1e6a65d5
2020-11-01 23:44:32
61
0
2dd7c01dbf5904e98d80afe4c169f07ac9c70489fbecae0aa1b95198d2bd2774
2020-10-30 22:01:26
63
0
29e5e407ee0baf131cc0eed48e101feab5c66745c888a013b01e75489c8b70c2
2020-10-30 09:06:35
63
2
06032c9895bd5b13bee1d9652e5126d4cab4d8fc9086ce0285d801a5c8281c72
2020-10-28 20:38:18
60
0
09acb504acc1ca22a032aedcb93f03ceac946a54d296db29d491e09429793b69
2020-10-28 07:49:27
59
0
0bc2429a0857b95ec9ea576d5e66e17c84eeed2cd33b947598897fb52309849f
2020-10-27 06:55:03
51
0
12f07da13f2105bc6bdbfa7832942ea7ada77e47a8df5cef17c8c441d313d158
2020-10-25 13:29:51
59
0
c3d19f509bac8d624b906060670e0137aa59d20dc422b53534037430c90bdd1f
2020-10-25 13:21:46
57
0
4ab23ce94cab5d720e15c63c21ad208de8f2426586ddc507b6b2c28d1c80e12d
2020-10-25 08:08:15
50
0
fcbe73bc734f48d28314f27f45f0e2488bdeacd81866267a5b1a25b2d71a66ae
2020-10-25 08:08:15
56
0
b2c6aa8521094e58d724469d7b850e42453859d8f1078465fe24588197e37504
2020-10-23 19:07:13
61
0
bbb96083834415b453e25977362f8ed20fb15254a6324130f168b95593492007
2020-10-23 17:32:17
62
0
9145ae9a4cb6668ce2eb9b4951934b9e014ba2138d23892f7a455bfcf5e439ac
2020-10-23 14:58:32
59
0
f3896aefc54a0dcc4ab8719350994e6b000e6b94275ef6b143d5d305a70eafd2
2020-10-22 17:22:13
60
3
9c02ea44dad30b55276fb2b9718a551f53c487f844c37347e9bb2877724b0417
2020-10-22 14:22:22
59
0
4632aef654edde02b3e16e52c0dfcaccd65286ac87d49202667f67b16680b9c6
2020-10-22 13:22:09
62
0
beb335623f62b5268d2e2123ea6cdbdf1138d9eec025e10bfed430eff30a8d32
2020-10-22 10:22:04
67
17
1482671b41daa27da7f8d971daabf7944e88e765cdbc272aea7df3da3de0f961
2020-10-21 21:32:30
53
0
6ddd4d701932aa3839e4017e7f91fb9a59ad7c3ec3cddeee0d649bbe57bfeb27
2020-10-21 17:47:12
60
0
61b1bd356bf35d9b7a8a7d2dafb760bfe886374a5d5b84cd9cbfc28e1f8509b7
2020-10-21 06:51:36
58
0
dfadb96966cce5a09cc33e82f1fb61d08897e940ab2f87b3d71205423389356e
2020-10-21 03:34:41
61
7
a709e591fc1c5320deab4f23eedaca6dee493961ae427de40e5af6568f3a5f98
2020-10-21 03:07:53
59
0
ef1b9c219d57e905f819f32a5c7d8dcd389ef6317afbdf40b349135a7c370204
2020-10-21 03:06:23
50
0
5177c0837c78ddd5fa8778981579c13f9fbe583fa7cf0b8c59c4b7b2a7b77954
2020-10-21 03:04:53
60
0
095fc9f40bd4677b631900006f2485b71b57ce529985c410a138361880fb995d
2020-10-20 15:36:52
53
3
a6b8ceb9908afb97470d28ca059d8d4f522553a966078ab86f600fbda7b1eec7
2020-10-19 11:01:48
57
0
72631212d98050d33a854f8e48fa630fb48bfcc21feb60e487509f099605c832
2020-10-18 17:44:03
57
1
8b681c8ee325504105bcbf6709d24c45406359cdafd641ef1747077ef120695d
2020-10-17 18:17:46
60
0
e2f0f30d9a9228a82ab3a13231c59fc75811c8ff2d6d5d9b509c1e3dbc21e58e
2020-10-17 18:15:44
62
0
7868a1740aa9a0315cc2087fe2c313580139339366f1b83a2b9571df9f8572fe
2020-10-16 00:04:53
60
0
d43705252d24d42fdf94973bf50713b68dd859a1ac48751329ca6d8fc8176fb7
2020-10-15 18:33:50
61
0
a2f46a257ccdfea68190edbcbcc4fa9ee53ce90e8a3602a58aec0177b7a9a82d
2020-10-15 18:33:29
60
8
ae8992bcfb9751bf954ef58ead7e5e2d0b42cb6e266af753da0e20ff01393786
2020-10-15 14:38:34
59
0
b03c7d1f7aecfbeeb1348c167fea321218bcd23814b8d47d6cd74ef0e965d280
2020-10-14 11:22:50
60
0
38c22563a18fd86a30be6027fa3a8636206ee64f01571f9c6f8406b695703413
2020-10-13 20:39:41
59
0
8705d5847d31602b042267d133cd225ceaf68229c68201cf9a6ef4ccdd58c37f
2020-10-13 13:13:28
55
0
c479fc0b11c7404837b0523761dea159d59b9a14c5546d8e445e3cf5f961cbad
2020-10-11 02:04:50
59
0
c7127b83a6e01b2817167b541eab0058ab940292ac6483554d46f4cdd80988dd
2020-10-10 14:19:37
59
0
a5e55f75b0a9b1026e2c75cba8fb75864056e7ea357a6030e325fc170f1bb7d5
2020-10-08 19:21:59
52
0
78c4aa304715a745d261145947be498399774913123caa0eab85391edac65d35
2020-10-08 19:19:50
59
6
dbbd3703134f159e76e9466e56328ef606ef5319de559699956ad43764c1d706
2020-10-08 17:45:21
59
0
f501d0250c1d3635664ce498c4fb35472fc96756ceabd9783a703dd361eb5daa
2020-10-08 15:45:50
58
0
88dbd0491638981c93c99aef16eee6aec8f56b2ac0291a3a92cf6d8ca525de3a
2020-10-08 15:27:59
59
0
86952bdc2094bbcd7d3d0fe4d9e10645dbf1447bd731df7c5993f6c546310033
2020-10-08 02:13:29
59
0
a0efec53bc96ca053608273cb03adff5dba92cfcf1a7880d8e9a043de8b30978
2020-10-07 18:04:18
59
0
2fd3d4eafc05c1e787889f27792761ae3ea688f60bc5d74988ede6d112adf0f0
2020-10-06 17:00:20
59
0
a8bd70d4ebe5a6ec32014fc3b2a0303d60128911870121a1867b7e785ef2c102
2020-10-06 15:15:22
58
0
15c76fc3bdc52a6505ee27649eda0e959d30d5910fe401fa403acfa789789c85
2020-10-06 14:22:45
59
0
bfe900e2237f6c7cc95758f581c2cc19f784ddf8e90cad5ae423fda2e7d51ecb
2020-10-06 14:11:07
60
18
8154dd7eb73e77a20913ae3083029d89434280550b37ba351a9c7a9023dda23c
2020-10-06 14:11:07
59
0

Rule Matches per Month (last 24 months)