WEBSHELL_Gen_NeoRegeorg_Tunnel_Feb21

Rule Info

Required Modules
[]
Date
2021-02-12
Rule Hash
a3779317946ed6ee00ab0fde455828b7
Name
WEBSHELL_Gen_NeoRegeorg_Tunnel_Feb21
Author
Florian Roth
Tags
['WEBSHELL', 'GEN', 'FILE', 'T1100']
Minimum Yara
1.7
Score
75
Av Ratio
8.84
Description
Detects Neo-Regeorg Webshells

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
8
Suspicious (< 10 engines)
40
Clean (0 engines)
12

Rule Matches

Timestamp
Total
Positives
Hash
VT
2021-10-20 12:10:24
58
12
7b5e3c1c06d82b3e7309c258dfbd4bfcd476c8ffcb4cebda76146145502a5997
2021-10-20 12:09:05
56
8
6f54da3819d325e711df441281c2513a15ca7e42abafadebe1b6f23ed880e8b5
2021-10-16 12:18:22
56
4
eec29fcc8b5f67c45b330b08385fae2f056f9f45fa3ac8a639e2ac75c6d51a7c
2021-10-16 12:17:13
56
11
969c67d212e9eefaa393b4567ddae21330940d3ae64dfb4cfe91d88de7d0b984
2021-10-14 05:48:23
58
0
8edc2f3809d9d423c8fd5444edf496fe507880e0fab5eee12a7da629e2eb1933
2021-10-13 11:13:30
58
8
bfc0c6f3604a35cb4e6482830539f9b52e128026d9b59204731624dedfb173ca
2021-10-13 11:12:15
58
3
c6553959ce570dc770349fc89c90b9743dc7c75568e26a12cbb56db1538ddd12
2021-10-13 11:12:14
57
7
631948e798050af06539294e9dd20ab03e98380af646890309a941bb77442731
2021-10-13 11:09:38
58
4
f2285feb5dd2e215b74279029b0cc6a73bac0be119964ea1e3451dc5c42e6fe8
2021-10-13 11:08:25
58
11
27f478858cf5b076bb8c0f81b3b1eea50582ad1b4d34b9436ed07033e634e750
2021-10-13 11:07:01
58
9
c5ef5dbec391ae03f2dfe16c179a4571ab0b67e4b47f776180dd7fa4fffdb790
2021-10-13 11:05:51
59
4
6c88c6579e353f248328de194b4f6fc003f51a64ff4f7386a63a981722b15fc9
2021-10-13 11:04:39
58
7
458bda00113a3cd0c0cfd080b1bc20f29915e7d82f59fa88f380077c30b4f5d1
2021-10-13 11:03:28
58
5
63737b1400174430ca0f936905a2338e49f815928e39de8dc5b9e8d0727233a9
2021-10-13 11:02:05
57
7
87cbad1477b66bd01ef407e748b20a915eadce5123856b7983bba57f3fe0b0f7
2021-10-13 11:00:57
58
4
1b1970e77592fa3fd4a480b5731945ce2dfe509401b67a85df5b728bd0e98cf6
2021-10-13 10:59:41
58
3
bfef1dac803def44b33d73b5fd7bab9c60f7bfe860bf09ef49635a3d40b3d1fb
2021-10-13 10:58:13
58
8
f80db929f87f5825bcf2b43ec5b8e101484a767756c2605251e2d7f634cc738e
2021-10-13 10:55:54
58
13
2b7c2c54d091a712643a21f5acfb9271f0421ff45c690f5bc8c30231069a9ac4
2021-10-03 11:42:16
57
7
f097f4074be9dc7a98dccdf1b9780ac7c37371333bb1f3e672f5f6539294648b
2021-09-18 05:22:11
58
11
e0857fded1066b879841ecd7da65f951f2695e3d2018987982c33d62be51f1b8
2021-09-18 04:38:17
57
4
30412bb44aa3c71bf0969913e00b2cd01ed9aae84cde78e0dc84a149607075da
2021-09-18 04:27:39
58
8
2ab1bb1af13ca6754e691000ffbe4ee07ff0089c6413d855501a2abc85e9ac84
2021-09-18 04:25:32
58
9
5b8e719b2f2dfa7b7648f1c96d1a62d25f3c1f65128cb64dacae33a6ebaac97d
2021-09-16 06:06:42
57
4
cffd86e3197e061dce3f4448f47d6eae93b5fecf1012d3fb46070ed5d6d176be
2021-09-04 17:00:54
56
3
053855662de9286932b0ba3c3f346703cf4089431ec20f11483efb6596cfa753
2021-09-03 22:25:50
56
7
ecaca148453f5e93d36c34459b1a461b76fd54fc1203abeab80a88b9b3ab401b
2021-09-01 16:30:58
57
9
bba088e8c39f96bcc94c12f1bc08104805f9b42eb223865c405cb1e6bc2cb34e
2021-08-30 13:40:14
56
0
8158ed5aafe89c45be5c0d2c52c763347e4de406f7afe4833cd086704dde4e89
2021-08-30 07:34:52
56
4
53c7dec5b0fdf90911eafa862bdcda752cd76cb6aa6904aed283f894f85f1914
2021-08-30 07:33:50
57
4
15dffe4e9b4a4de908bcb1cb920773ff9ac2bf7f235184ccd4b998fd16115d43
2021-08-26 06:34:01
57
0
b52f9d960c889f8f2e7244848928759d81532325d533b1c1282b7e6afee3032c
2021-08-25 04:13:53
57
11
93a6616b61f5a1626e0d4fc53d8016227bfca84be4f741559f6a7fb19447d039
2021-08-20 12:11:48
58
7
c0a4d34d95bf1fd525f84c814ea6484728cc2a76f1df87ab6a8daf5ae2d59560
2021-08-19 10:03:49
58
0
dce05f3979a1cb9513be8077534f5f4505d0e3a0c50d5579ae026d8e1181dafb
2021-08-13 12:58:31
57
0
ab753e8a6c17fc9fcef3cf99a2d587199f4b1af710600b42042cccff320fd0af
2021-07-29 07:26:07
58
14
fdc2ff312e3e2355108873a58b74fdff936b525b71cdb6f3f7f6ead77e883982
2021-07-27 13:26:20
57
0
178afdd981a08b043b33997cfe53248b27c4891618e3b962a34de8c2937a8100
2021-07-07 06:31:03
58
0
85c9326141070e2aa2f292d9ad9c41e4e4f1e1f380a52027ebf8cf1f9b678134
2021-07-01 15:48:37
58
3
ec33d606eb4e67accc5388dd77c6ddada35b3c85712437a56da79e007e54ffb0
2021-06-25 17:53:52
58
9
1b18f67985f7985ca00444712a677d9f6f497314933233c8334ac7efc0acbcba
2021-06-07 10:12:49
58
0
122c932525a15ec235ac09431250acb8808ad11228fdc5e84819678c7bc5fef5
2021-05-31 17:39:52
59
11
0bbe4d425679143b27efd4543b772de91602be6c215bfc5e043058580ea40a31
2021-05-28 09:32:46
58
0
793374b14c6e6f739dc51bc30f1062f456f572794a5c7086274044ea5c2ec8ae
2021-05-21 12:20:41
58
0
aff71caee0ede4b8edc9ea88e18f210c1d21fc0ce010c45d50bfd6ac799b9608
2021-05-11 11:35:26
58
8
da63b46a10baa6fd890e791b0a7656ee3095dda32f9c63d8f834b00a83da6aa7
2021-05-09 10:18:26
57
3
313237518decfe1fb2397bc092e68cd009a6419060a7e7747fd8e34dead5625e
2021-05-07 10:45:44
59
9
21add35e2bc503985c74980f1ab1a767db231e178e97afc9e8105505a9b509f9
2021-04-26 09:30:00
51
5
aaf295c816ff2238a610af5ba17a5b589704d392424c08806aff2f7059821c34
2021-04-20 20:10:37
58
2
11d0321c136267d3b39926cd5af78daa24e20b1e9859058d4c59b7e573fca711
2021-04-12 10:40:36
58
4
52bfa1fc069e787fbe7a7dd9cccf3a533a3ab110f263b56b0bbd4ec4a4f88082
2021-04-03 12:40:25
56
0
a1344730e1e759315498106798a3be5a56267cdbf137ca1e6b723b2f1d277b79
2021-03-29 15:54:39
57
3
69d02f349f8d8d51f84bfe85d7985364edd1a612582fc48cdb490e6d95506c61
2021-03-29 15:48:25
56
3
45571d68e1f7c92bc9c61b353b7c7da376131b9a40a11b65e3b2909832085707
2021-03-29 06:47:16
57
3
2daf8b10a83c1344b8f6bf17bc0f723a92be0c3d1b839c6f20bf5768c4626b22
2021-03-18 03:26:30
58
1
27fbed783ad1a7c5802fed2011414afcad93c025624f218d53fc790877ad8194
2021-03-12 13:51:25
56
4
25d75ffae98197efd35a9bacf9e58c2898b52e98a8c5dcf3d69d0ef753829e63
2021-03-04 18:13:12
60
6
e26b9bee59e5c71766dca6ab08cb6ef9a1e138839d997543d2a5734ddc98f42b
2021-03-03 00:39:49
59
1
406b680edc9a1bb0e2c7c451c56904857848b5f15570401450b73b232ff38928
2021-02-21 18:55:30
58
0
a4062c613b32e4431e8f13b442c7376f94cb1fc2d2d517ae5374d7ee25fa5ef3

Rule Matches per Month (last 24 months)