WEBSHELL_PHP_Jul22_1

Rule Info

Name
WEBSHELL_PHP_Jul22_1
Minimum Yara
1.7
Date
2022-07-21
Description
Detects PHP Webshells
Reference
Internal Research
Author
Florian Roth
Rule Hash
42bad796303c22837136aab6336e8645
Tags
['WEBSHELL', 'T1100']
Score
80
Required Modules
[]

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
110
Clean (0 engines)
1

Rule Matches

Hash
Timestamp
Total
Positives
VT
88aa4c9bac919d41a5f930303bb3fb98121b8cba153bf2efbc29a6e377b8762e
2023-06-06 18:03:37
59
1
4cded5f85f01f34b90070aff14a5e74d94aa1f94af4003720f9192ad6acc894b
2023-06-05 14:01:59
59
1
3a5ea295a16a106550ff26270cbd3446f06fb868f61c98ff445133574452ec8f
2023-06-05 00:08:39
59
1
d35b8bce4b5711ba7763d3f8545eaed43a68a2046a3d0ad2b72acd0d144bf733
2023-06-04 13:11:59
59
1
e310d0e0761ad03b8584d2b2c9d63e7bc2d63d7106f25a884cb3d794d4aa421a
2023-06-03 05:06:23
59
1
34d2ac34affe4f5d7093f359730c92dc20a5c19adcb125095b674d200ea92bb6
2023-06-01 22:01:44
49
9
a9ab54e539f6c0c63df04b77d9f325349022e71939cbafdfe46a606b5728cf2d
2023-06-01 12:02:22
60
1
16fb0fdf65bf9b95c3bb4960a8bca2a75948c430c071dcb93c94bd503246b7c6
2023-05-31 21:11:18
59
1
cb024619d9fac1c36c8fadb90c126709b5e4ff463f400e6ddfbb2c025e8a8171
2023-05-31 15:12:43
59
1
b2b7c094c7ce9aa215a4832159f0e5a4b95da9bebbd45a94677daf0ab64b83d0
2023-05-29 22:08:43
59
1
5fe39bba06084fd4e1cb0ee2cccc876839e26e1884d9a45f34151c2ae4c651be
2023-05-27 14:11:25
59
1
a6d863c4f8158580c9ca08e53748792ccab78133d4634dd455b0e0f93a94140f
2023-05-27 03:03:09
59
1
ba0b714c14e1218b48a44c4f706e01c8bbb89e7ca1f89a77b348bf4966e8138a
2023-05-25 23:06:52
45
1
3388f6a924e13ef51425714f6d0d7d8aae360d224d67dcf22a2155c7a26b86a6
2023-05-24 17:07:10
59
1
91727feb1c6750c66439150aa4f17266df0eb593de279438e21380e6b841c204
2023-05-24 12:20:57
50
1
96b2ad93d46ebed202db7cafcee19ab5d97cafecc19e8b494167c4bcae493b34
2023-05-23 02:09:38
59
1
f14527a3f4db4c377132bee3bea32d0d35500b834bf7d48578d55cde1cceb4b4
2023-05-21 17:10:48
59
1
298f9d7b7c10d5bcbe91d0eda84aab95d612afe300fb2a9490e48664a3b50e8a
2023-05-20 21:11:16
59
1
a5c6c223762446d20a4d034105b960816b421eabfd4590fbb9dfbc64b08a2fe3
2023-05-20 21:09:13
59
1
1e3219893e2fac375b4e922fe0e8a2b3d2f9a1c7016a92cf6950eb32423e6740
2023-05-19 10:15:19
59
1
ad7ba2649b165287e6d3bc28dfc4c82b482d118802c793869e631badac7f82e3
2023-05-18 00:06:35
60
1
6aee7b0c90c2781d68c9255aec5a0e2988286d530f6b3825cf4c63fe1904a1c3
2023-05-17 11:13:36
59
1
e96491e141c2694edfbf404c25e2f74a96d0dd4dfaee5270a27bf42503ef546d
2023-05-15 04:10:54
57
2
289a28ce9e3105474a0a3b249f4cc6b3f0e9c9ec8b45f02101789ffa67279e59
2023-05-14 13:12:25
59
1
ccd36427ee71df1ea5ba7cc4e533af766af5a3df1136d3fa0ed2e0e39b9d02bb
2023-05-11 19:06:31
58
1
e214c0294698144c4062b55945d0f8acac7edfa59bdc105be3105e8f122ba549
2023-05-11 06:15:05
58
1
cc0478e31beabe06f3c1480586c83ddb24477bb2756d19f872e115317a5a961c
2023-05-10 11:05:49
58
1
65074124b71e9d24b966612ce213dda1f905abc736dfc955fcec9176f462f38b
2023-05-09 00:08:24
58
1
664b4853295672c55ef841cc94226fb6952b3dfb5978c730823a880420f71429
2023-05-08 23:15:42
58
1
09f8c531d11897d2ffd27c589c7805f8be1905900c9c9f041d6e9e3881455f5a
2023-05-07 11:06:03
56
1
0014260e4050f988bde7cace244e305a57b1f1dc83d34661ebc214080e210d7f
2023-05-06 15:23:28
55
1
bfcb7962aea4c6b4192c7d00b8a49dd4beae50e07ab7c2a5bd98c02d80b2c2b2
2023-05-06 15:21:07
58
1
26bd9ac3975b3366a9a6bd56e3e697955f42cabefe4f0d12e0ee238b009be0e7
2023-05-05 18:13:24
58
1
d15e87b694173d05050886bc2781ab84630679e3049df637d796a5f597786f66
2023-05-04 17:06:03
58
1
950d37f2d97a21e2fc5231df3cbf17285f04b196807cdb5ca0d8f9cd59d5ded5
2023-05-02 12:11:28
58
1
9a1e79ad6375638052174070ca5a64ec2b84264546ba5bc50f377367576404ea
2023-05-01 10:14:36
58
1
b399a78bebbe8476a08391033b03bfb9679fccf5f6bfc5ab475bd2a1fc1ba6d3
2023-04-30 10:14:13
51
1
9f7155e4c967a202edabe02fb80f2e492cdec82f37535340cc8c51a8e04975be
2023-04-29 01:17:34
59
5
d62137ce61a7868c26a98d9c8fe926872047b57c81176c6f71ab1f1c8494305c
2023-04-26 12:08:00
59
1
f5d76203c57e477e24e12a688f5bb5f173f2ca1761b1a3249be565a972cbe442
2023-04-25 05:13:18
58
1
ef49cd03fcf741858836abd9d9330bfdaede6bad877d01d2277fa35b3864fa95
2023-04-25 02:13:56
59
1
ed6e6ff09e313b26cf0add9368abdd9f3f018bbbd2276310f50f9472ea4b152e
2023-04-25 02:13:56
59
1
2c8fceb398f9ea2d9f7d4bdbf80cde4b82821e8cc6950cfffee6417534e1a741
2023-04-21 09:10:24
59
5
4ca2191521774fc73b350e656017da321f83940bc682667193c485112fa4672c
2023-04-20 15:12:49
59
1
b71025498f5c92782d2e98d83751834191382a3516c87b4b4479b3ccf765b51b
2023-04-19 14:19:13
59
1
d84adaf0e3e2226d49dc24355527c6fac7c119373b80a0dc9da61ff946214bc5
2023-04-18 23:13:27
51
1
dc6c781ee708bb94b72c830834047014b02ea198beb8c3e71b868762e11fa275
2023-04-17 23:09:16
59
2
9d32791f096991e0c67356f7f3d8155d089ba54bdbf1c42a0e0351e811644471
2023-04-17 17:09:51
59
1
6ef945df99fe5b3093bc13f53fb0c48f56f14f7e89f067ffd4ac366b03f9dc42
2023-04-17 17:08:12
59
2
08aa485f05f985ad726611ba4820330e61413c38dab2e336070e8d6c27654e75
2023-04-16 22:17:01
59
1
700f0d24f35e37ab3269ed6758421a7c0ae3cbddfeb0b6e59db50ab6b8794e3f
2023-04-14 01:22:00
59
1
e841d9f4183cc95d3e0c789f0a92a9a7aef11634bc6a8c8c9d4e8dabb7575c72
2023-04-14 01:21:50
59
2
684b8d9f0bfaa78003847a75956e851612850fdafd89e61d05383cf214969208
2023-04-13 11:11:32
59
2
cc2df8658ba8b0969129260b196c3710f6f49b7fdeb6cc61e483a199043f9ff5
2023-04-13 09:11:44
59
2
403e20b1277e9a063b1fc08f7fc0f2f2d7a23247134eeca63299d484873b3208
2023-04-13 09:11:42
59
1
b77d297959106f3a8f789a435a768d0929c9ea6f8a40c2dafdf20211535da3e0
2023-04-12 23:12:00
59
2
ecf9eed3766f910d3aa740a1ee1b2c26b352ea62fc7d53bb5e866bc137c31221
2023-04-10 17:15:09
57
1
035721bfb2f89d538e1037dc35b9595605a3064de36c7c2a629ad64ab4772815
2023-04-09 05:06:55
59
2
e6576d9399b35b58dd96cbe1c00a77d97f8afec45942d6475752cadb589100e6
2023-03-31 23:36:54
59
1
2fe0892aab2420ba74d43c87d62819160cdafb1c2d41feda42f8474b42ce94c5
2023-03-25 20:33:04
59
1
0f0ed053bfd15231e68a66ed4c65e77db520110580d1aed75b1365da6f8453cf
2023-03-25 00:17:37
59
1
93766421b71990e7f4e99dcd597e46f0c136283138aedf10e06b38cbd2323183
2023-03-24 23:23:10
58
1
84060a9af024004f3238199606216a18158b52717301b68b6cef41060bb5aaee
2023-03-23 14:54:20
52
1
9bfb621415e480c14999376e2a893ffd8d088d95618620ebb9a4db424725c797
2023-03-21 14:09:50
59
1
0b7c017af3e149c9325ce308138cb2c43169907376da371a895591d37114c979
2023-03-21 02:03:48
59
1
154f6f58053fe145e96b26ec2088af75194a35e50fdc08b436a8e36bb9dafa64
2023-03-20 15:36:22
59
1
5fa3eb6fa05e33f3ea764860ae294942a9cb6245f348ba2620da566a33a948de
2023-03-18 05:02:59
59
1
29b144a2a0ad730ddffe82ef8a05f4b5e109b3824d0fc9fa8480a2d430e6a587
2023-03-17 13:37:23
59
1
318939e43ff57bd8ba38370856b6ad05429784d2bde81e190f98929c1c143dee
2023-03-17 01:12:34
57
2
b9ad23be49b0cb1b460e16790fc3d45b81608156ded6de9965613caf8ebc736b
2023-03-13 07:46:39
58
1
3914aab826ccc7d3efe437dd73e2e68c010d266d87c92477a542bcc1c19821b3
2023-03-10 09:11:21
58
1
afc551a0bd8759a0d8d95f41f75d37669c9bc4e589b827ad705dfaf22e7fe9d4
2023-03-06 23:40:10
59
2
80a1d13d0297d91937975f4b9a86d0bb46effdd42cf66b26d31bf894ff1bd7f2
2023-03-06 20:24:09
59
3
60dd12747aa95724b8d6fb353ab1fbfe76494b26283a6e085f47d8bde057d271
2023-03-06 20:17:39
52
3
2c98add6e2506217a61d9b42a2b2dd5a1e9dc2e4b4e6bb229ee76ef0d7adc6d5
2023-03-06 12:39:27
59
3
069e6ca7e5585fa2f1c1d75cf58e74b2011db6537c48fe83c34b74998a880b5f
2023-03-02 06:41:19
59
1
bd60d109c043008bfeb6d29724981a3260fae6a1e8e7229dcff4a84b094d0f94
2023-03-01 13:04:26
59
1
b69c8e45e70977b73d35945f88400e7172ea66d215579b03bed6d219360183ab
2023-03-01 03:55:49
59
1
2135fa9739925784a40bd8e0582f8a197a6d7d09e86485d214779263d280b6ab
2023-02-28 11:10:02
59
1
39fe473037ef8cf577e73e66de52c360302c7232669aca9f7b9cf32ba0c356a3
2023-02-24 12:01:57
59
1
d93002407ad015e748e91f48e7350543d8fe3ea01b0a892f6d7ebfe72faf4632
2023-02-22 12:44:11
59
1
0ca5194986e6b9b3bb76cf09004e6cd1d9258efdb1096bef509344a45eecac04
2023-02-22 07:38:30
59
1
cc02dbfbc27474fead450191d56828f360604e7a9ed63b3f90db2049f397128d
2023-02-20 15:55:26
60
1
39d48945ea0817d799fa7426f98521cc30f41748a40780821581ebaa4d0cf7bd
2023-02-17 03:46:36
60
1
c505220ec6c43f903f672c67a9346ce3fd4ebe76e29e7deea32388d401cf53b5
2023-02-16 06:33:29
60
1
3df91d6f192bc798bb508680bb1984ff3b310da33b743fa64085e55cca892ab8
2023-02-14 14:48:22
60
1
e5e8c6db05116ddb94ee86862bc8a7dcff774f16b4985a90d43f5b00d375df05
2023-02-13 02:51:16
60
0
84de1018501f91c65eb577a40e34332fab0cebf9fe3e4cc085e3cf30d2990b4a
2023-02-12 08:34:00
59
1
8e9752e3689acaf213e1f3a335ce5079c581ff30d8783ff0d700b0d66f8089da
2023-02-11 17:25:01
60
1
9322ebd06f8e6a38f3b5c95d089859800c4e737b035c7d754a7dd95dca862f29
2023-02-11 15:11:02
60
1
2202cc50711aa46a7b8b8dabbe71e3c180ef68bfa892d6b4a0fea6275d062872
2023-02-10 04:10:46
60
1
f645962f8a9d87017b7ee6a80d48dc2899a77fe9c0994d033d6d0ef9e6cd259e
2023-02-08 14:56:52
60
1
2fda75d266b1d0add9e80ee7dc5bff6e79e9500982a34f594e6bdee0512a96f7
2023-02-04 23:33:07
60
1
e5272535a902d5bc71e4e87204531182a3372da4220d60f5a7aa1b70185cc447
2023-02-03 20:07:13
60
1
5ad0135453b5dd26a690809f5c183e007c8cd190f09c3dbaf4d7cf89a09a4567
2023-02-03 10:23:42
60
1
208007c8e7bc7bb109b4f1d2a93f97423d500ef1e945c65ce1c5dc28a67f2e19
2023-01-31 15:15:43
60
1
3fa8a73ad994404fbc002846ba227b339dd350527f01c83a440c9518068ea516
2023-01-30 05:20:27
60
1
ef9c961caaa942c226546e96b0c3ac161abb29658c4ceac0752be24470bb466e
2023-01-29 16:24:56
60
1
8fe34c4b33d932c90527492d9f987ebe83f173e36d1e1ab0305ca5ec0bbde447
2023-01-20 19:40:28
60
1
d101cf876b6266c7c5dedc4a5797daa595618ee7f92250184b0257cdde406374
2023-01-20 04:16:17
60
1
fef58f920d5b5cdd27c540e625f024a33d5be2eea8913c5fcf1e855414c8a8a2
2023-01-19 21:52:48
60
1
3bc77a06c4be1cad7a14a874cca3d43d97fb6b536262b68ddc6349e2cb89b7a4
2023-01-18 00:57:40
60
1
1d0d91e5a0a4d9516086659fded0824d29fd9b59a344ecec5fcec5c424c38c5c
2022-11-18 19:20:30
61
1
cd36dcf6b97837782079f947f2bebeb186f28225f80c9f4e3fb6806cb4e6bddd
2022-11-08 01:15:12
61
1
5d30ce01a19623aaaae84bf3a4cc3ec16811c98f2b6c3a70fcad6e473b0386e6
2022-11-01 18:13:23
51
1
a033b7d709fa23658813e4dba7fa9b84feb30cbda1d4763a780b23695cf75788
2022-11-01 17:55:06
61
1
8376a7a3dac0378bcbd699c01156b51c547a6fe6b46d64aaf87038ba1eab1358
2022-08-27 05:51:44
59
1
5f67d3f90ba3b92ca48fac9e407fc12548a923ebfae4f18b5ccafea891cff4cd
2022-08-25 09:10:56
59
1
77ece04c9d8a118181f20513faacaaeb1da1de8c798edbe3bc33728d7a36f605
2022-08-25 09:10:56
57
1
95b1ccf3e33f0361c8cf8eb8c6034991372fb376d738d651c623946a9aa4255b
2022-08-21 01:13:32
59
1
2b319185b79ec2708f9e1ae7d6d85bc036d572e4ea6da931c445f0ff5cbd472a
2022-08-17 22:48:48
59
1

Rule Matches per Month (last 24 months)