WEBSHELL_ASPX_MamadWarning_Jul20_1

Rule Info

Tags
['WEBSHELL', 'T1100']
Name
WEBSHELL_ASPX_MamadWarning_Jul20_1
Minimum Yara
1.7
Rule Hash
6a6ba0fdebd650d7fc118c28a5ccbb19
Av Ratio
16.1
Score
90
Author
Florian Roth
Date
2020-07-28
Description
Detects Mamad Warning ASPX web shell
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
31
Suspicious (< 10 engines)
47
Clean (0 engines)
6

Rule Matches

Hash
Timestamp
Total
Positives
VT
3baee1c84a49286bd3c04b961f9763158c99ecdea383a19711d98061466afdbb
2021-06-06 02:25:17
60
5
49db79b1fd9f0a58f8c1825c5ee4a257e03c9f853adaa8e9d024942c63fe36a5
2021-06-02 11:11:36
57
6
51436e3be86a0e0616837de4285f298e716402bfc66b9f3a1a05af94a3c777ab
2021-05-18 21:19:30
59
17
63d4936e069a782d2a87f6943548d448521e3702531afd3cb5e37b998afec85d
2021-05-17 10:17:48
60
12
6f2daef5f7e0ae775e4d72a1fa4b64395d9965ed756107b8228990f778bb5051
2021-05-16 01:23:41
59
7
3a23598c17bb6cab45c75219e699782c8a375452cd47b8f027cad74159487d03
2021-05-10 16:06:19
60
20
5d35f8ac45a4bc739b97534f077ae97f4e4ba1abbf795afd17238139253600c4
2021-04-27 21:26:21
59
28
86eaa7872ab685e759d5343026aab11a118f4a7e5ab94d90b069f993718895b9
2021-04-13 16:19:21
59
2
d380d5b16881714b0c81d029187ab67a6faa4c0e550f9747d0128f8096e750a0
2021-04-13 16:15:26
60
5
84fa8e80f5045f35684e4b306d7525e9d1efbb5d58e281195190d52f0b1e481f
2021-04-13 16:14:00
60
6
a1e46edf1db6c5f64657b8e741cd1b7e2fb959ac9771181b8db78cd1b3e7f1a0
2021-04-13 16:13:21
60
7
ed108cc724473e0e30d17c8377d24043d94734ecef8cec31aac620642bf044f2
2021-04-13 09:08:04
60
7
1cc94177d57227aa119e13d1f58da83a9e0f9e227fdd82b4d2465872efc6bf45
2021-04-12 04:02:08
60
8
09d872d04815780bc5254a735da4f4453ea36940c96d9a859f971f92600bdaed
2021-03-31 23:42:17
59
8
b45089d57bb56939e84b9d5734805eb85c0506bf37e05977aec8767bd3bdda90
2021-03-29 20:22:07
60
31
3bcc26c2d78ff0dbbc790815e070205e6a4ec0f590bff3278fa2b29d0be1ec85
2021-03-26 16:57:49
59
5
9ede3183755ee2c45077bbfde5fc5b7f40e07295a69d92c16b50bd0a2a367796
2021-03-19 11:54:01
60
1
e9d47d45632c8797ed01dbffc3550195a01ead01a78ea5d76709262bc7907cc0
2021-03-19 11:41:22
60
2
bc13ce5adb7a620536816b59f3cfaff47772c03df09592baafa1f35f60fd1ec8
2021-03-19 11:26:47
60
2
6d8e2d03d9061e4e3ea0eae0d374f6d134ed1627e365e4e4f97e3b5dc8d1465d
2021-03-19 11:02:18
57
10
8ff6faab86d6b1b2bcec74f16779754b52d5950915af8dce0585a4dc44c41647
2021-03-18 22:42:37
60
4
d6743f2eea3720776247edde3588b665b64da35f6b3330530d815471acb89715
2021-03-18 22:35:03
60
7
5f6ffa981cbfe05b5e36798aedf53d515a5170fc301481b0620466d9624d773d
2021-03-15 20:19:39
58
31
c0b4a45a3ad7fa9e048c0415eee29316b4dd558bf99fed05a7abb3532cb463d3
2021-03-11 16:17:05
51
6
764bc82def5072ee4c191e9cd810ec7466c1b6ff808fe1ff6aacc005499d5619
2021-03-11 08:17:23
60
19
af621557843ae6b859fcb22fc6bc0eac6da4c61158766021a8253fd5deb5ea0d
2021-03-05 08:05:49
61
30
5b187e6b7663cb3a090e0177ffa6b0abe1256657fc501e971de0e8a8cd9151e4
2021-03-05 07:54:32
61
30
cc038cfe9fb81fd695e2d1d125a8154d1c9bbc936e626ccd62a1e55487ad91df
2021-03-05 07:51:14
60
27
9debf415c57ef498c6f5b83cce748c997e2d644347e39b6e7ba099a552f9a0cf
2021-03-02 06:11:01
59
7
3aa81a269bb6ff6ea85c3ee75463316adff1b83c820bcd8a8dcb7a39b50f67ed
2021-02-26 09:05:03
61
7
831a22fce083387d889245f5fd0fdc39fedb8e5927269a05169d7138af04ab0c
2021-02-25 06:30:45
61
7
fb3d8d43e1461f0c3e6feaa50ea147255205dce48850b873e7c1cf26ac4e4716
2021-02-22 09:53:51
61
7
cbe239bc1ef3b5d5c3db52e50c8880e0eb3499377b29b7835c4540737432d679
2021-02-22 09:22:26
61
7
00e5d1f86db1731e0a6d3b1301bc2574245016e8681efdd5aaacc9b0d02d3451
2021-02-20 19:40:52
61
12
2120d422e000ac60574fef715280529b49d744f0843786573b767061de09ea17
2021-02-13 06:51:29
61
6
e16f9ae5ae2b35e54f1a8c128c93ff359c460902b38e8aa3376c330da0491cbe
2021-02-10 04:14:29
60
13
5bb98a632ce7ffb1c8ae16a228d998e4d90fa1535461ebe86ca6d96983fc5bfe
2021-02-06 11:11:50
60
13
560c2687d165c3df3d820e7dc921d9d714f03015c6217a9e511ceac789b8db0d
2021-02-06 11:09:58
61
14
6aa21242fb2d31961a1963b590a823452f007e377dc05d7bb9fb7684f482bb07
2021-02-06 02:36:59
61
12
e5a6aa24d318c7899b6d6407375d491c0cd6437fb7a2e2ab57dcbaf325ed39ce
2021-02-04 22:15:59
61
16
3177310a2c0276c8f35735d27cc6277db470942c2eba4e7fa48e8dce60c316c2
2021-01-26 06:35:23
60
14
3686adaf2450883c22b18a9740b77c16abc9d82454790a45d9d6e186d5b3856e
2021-01-25 05:02:30
61
10
b2d9f35e2fb4182e2885dce993b0d93b3c92563ca4c3f74203286e1e57aaef83
2021-01-21 16:07:55
61
7
8043c6e7e430da4d2cb556c7da1cb2e8a96f82d1028f5237f3feb6109007ac24
2021-01-14 17:38:09
61
11
d08a283b1b8e8fe3aebe22fa5ea0cfb743266f474d2d349336861cb32cb160bd
2021-01-14 11:53:00
60
6
ff4a499a0a4f8b2c497c78e4dffa5cc5e35f8f534b3c6af5e3ca7f3eb6ddc5e7
2021-01-12 06:43:08
61
10
707927e0c5dd633c676228d861f06ef2b0e8a0ebd68bbf3a6a05d8924b74e4e0
2021-01-11 10:46:26
61
10
14b8cd0865aa130f803d64d70098c7331b925379e28efc509b4a73f3ad45251b
2021-01-09 08:42:29
59
11
350d212e8067361cde6082ca0720e846ec6dd449f9b390ed755e9ac80d444c99
2020-12-29 02:14:16
61
10
cff0e1b4781e883eca8d203d71f62da976795e29482b70821ee2d5dda1b1c74b
2020-11-21 05:46:23
61
14
026cfbcec9024f0b77034adaf8bfdcde0eed8cf647303421f24769db56311138
2020-11-19 12:36:23
62
0
d3258265a1c28920f771ee79abffec122853c92e9bba3be044059aaaff8fed79
2020-11-19 12:35:17
59
1
655367d73e0658ff5f8ed1188e07fcd0fbf199b48b3e8c767e33e2df1b981163
2020-11-19 12:34:54
62
0
1dce3ecced1845f1644e5cd38b0c951956b92d9eac3610c6b6b0c111b1c6195d
2020-11-19 12:32:33
57
4
139f1fb8e07091b8130a52ae1c4be34b982439b12cf7609a0d2925b2aec359a9
2020-11-19 12:30:22
62
0
7678c1ef858619d12fba50ae23fca9587ecdfe928a7d799e729eb68636e410e5
2020-11-19 12:29:40
62
4
76af326e95c9eb55a94eaa3ce4b395e66d061fa424a43a697e39208a6e61a6ad
2020-11-19 12:28:46
61
0
8e7170955858ea4af91b7359b80dfb3a08d52903b2677be6fb5085666c4de504
2020-11-19 12:28:21
62
0
ecab3f49dfb2d2bbd5d83eef4bbb0475c35df7018669ecd2f5fa87ab98862d06
2020-11-19 12:27:47
62
4
89c8d8167dcb285dec73a2bb071060683ad8125385e29c5a2fbcef7dafd36eec
2020-11-19 12:26:57
62
4
79a2e555dc03eb9efa0e13360dba99964753300c2a3278b4d87fca8ffb6c8627
2020-11-19 12:24:58
59
4
c509869562c41c1bb1de7a695e6b1818ff68dff89c7aba1b65e12d1e2d50f23c
2020-11-19 12:23:45
62
4
7dde20160b13e1c60d8f19397a7310397402e2b1ad6719d6652bdf037d9baf0f
2020-11-19 12:23:11
62
4
25f4bb2acc3e573ced88fafb5d684dd63cf6c5a12779de5f43c8fa49af37e624
2020-11-17 12:50:51
62
5
9d3676e0bff9752af86e03b25f15012fad2322228d7e46666e8ed517938d52fe
2020-11-08 09:28:05
61
3
ba3d41a719d2b2a117f30c4a333b738b3db1dbc767e0b607663aef2c3a4214d2
2020-11-08 09:22:33
61
3
988a0de4149fe6288d30ec6682e1b71f265567fdb839ff4911fd4709de88dc77
2020-11-07 19:11:28
61
5
d8782884c9b01128b27e4012c8ed755a7ec7d24f44a59e5330c322b2ae87628b
2020-10-31 10:16:09
62
4
abb3ddc945d147a4ed435b71490764bc4a2860f4ad264052f407357911bd6746
2020-10-07 15:14:41
58
39
642b83878afd2e725431c898790ce0a9d6dd451354effe3628f56d9a63805280
2020-10-04 14:49:57
59
0
af1c00696243f8b062a53dad9fb8b773fa1f0395631ffe6c7decc42c47eedee7
2020-09-24 12:51:44
58
34
6ab2d4254e151a1bd6993c9845d5527a02b79a4fc16b1e21c4ce355bda6596dc
2020-09-16 18:31:58
57
6
383efc418ddf83f24c3d29f1d925e6dc400074048ce3e823feb04abf853bbfcc
2020-09-16 10:30:07
57
16
63d94bcbb7931642afd8b43f61ecad1498d4ed7cf49e8b5dbb7e8dbc192debb6
2020-09-15 15:39:40
57
6
d022678be7c007b6a9d45771ab12b20e4ab7bec57ee90be8797c0af93b46657b
2020-09-12 16:58:10
57
8
7fb372c27cff4e3b5aa88cede83c1e6d5ff265762d506396ce217e9b19ec82c1
2020-09-12 16:56:03
57
7
b831bc7a7625f00ff1244adea2ec39b6fc3263a1069363a2663dfcd836e8d30e
2020-09-12 16:27:15
54
5
911f0a9467bef471e53f8abc1a09ed0b5eabf1667eea9616a9c60f81ae0a60cd
2020-09-11 13:16:01
56
5
593fe67a77712e69e1ed971686baf05b4bd4c990fca5eee0f04ed0bff7bef380
2020-09-08 11:17:25
56
12
a6a4be7cc3fa7e9478a740e283ff454a414c6773aa944689c6d76699eeeefbaa
2020-09-03 05:24:30
58
17
5fa806074bb6b1efb2f32d0761e5c54d8ba2efb0d7b97237b492a4bec037ef1c
2020-09-03 05:24:20
58
8
e3387f7ba084f94b74eac6e1bedf041dd0aa0d6f5cb9ec42412f9249e62f7658
2020-08-22 11:05:39
54
7
c63058e46cbd20e2a60f3177d65052f642addd2240e2dbbb7f18b7c535ea7326
2020-08-14 17:29:13
58
11
653df45b5f1e3b16f8ee579a6daa8015067087ae25258731aa2208b7a3868041
2020-08-10 17:04:22
59
6

Rule Matches per Month (last 24 months)