WEBSHELL_PHP_Jul22_4

Rule Info

Author
Florian Roth
Reference
Internal Research
Minimum Yara
1.7
Name
WEBSHELL_PHP_Jul22_4
Date
2022-07-21
Description
Detects PHP Webshells
Tags
['T1100', 'WEBSHELL']
Score
75
Av Ratio
4.67
Required Modules
[]
Rule Hash
e89ed44ba49e1440736444d7e11ac694

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
7
Suspicious (< 10 engines)
65
Clean (0 engines)
24

Rule Matches

Hash
Positives
Total
Timestamp
VT
f90b419aab0d9008be1a72c1afb37de1d1e12b8b1ed2ce6b88276d8a4d73abb9
3
61
2022-11-27 20:23:22
f1a644abd90a6ec05b23d044c85d9a7b256b7d30c462454fdb6769b076ba0c24
0
61
2022-11-23 07:20:02
b98baa954440716b57b568a19458f4b43b53b8aacc7553e7ef06081c10cba880
2
60
2022-11-22 14:06:57
c72a82a849e97aab4f010f774fdebd3f78c0a8461c4824c9d78823168110cee9
0
61
2022-11-22 14:06:57
2569a272bd265d87be1d0be915dd6f238051f7f7da249ac62eb86b3a5fc10748
0
61
2022-11-22 14:06:56
e847a39fbae1112d20d694c0a4174dd06195222e1c584ce88bf32f6155b00873
1
61
2022-11-22 14:06:56
248eab10c94a82f70529a59733657f10261843549d0fcff0d391ac8a7cb8aedd
1
61
2022-11-22 14:06:56
e05a45770302e9545ef795547ccff57ec0a929accc7713996c71d033e4c543be
1
61
2022-11-22 14:06:56
e2e3113d8df0dce83bc92e37633afc511d7420f5179b450a0ddd8260d701a669
1
60
2022-11-22 14:06:56
ba31b89343dbf0e1ff71108a51b50f9f71cf3632ba5072ed1ac79c613aeb5ce7
1
61
2022-11-22 09:22:01
56120789969e664aeaa85a63dd63c76764436a4d095488b25bfce4e9850d5eba
1
60
2022-11-22 09:21:57
761712c6f87303d4382694c2c21dc7dc6aa7af9622405f8a61ef9931dac0b4cc
1
60
2022-11-22 09:21:54
9cbcf13ba96a39fe81171ee006ab20d97becb322234c07348fb3fcd450a4d8dc
3
61
2022-11-21 14:43:07
f05fa7bab18a34821656ff9a1520880a8f9b52513e7b5aafa278956069ef6b7b
0
61
2022-11-18 03:11:14
f227740c07c108deeada22917e70946599729c713ce09974e6821fdfcec4cd9e
2
61
2022-11-16 12:18:25
096d2ad0f1e38e56d0fdc19873f2269f09226ddbc9f002bb9748317071999e43
0
61
2022-11-15 22:22:06
333b3d1f5c072309a2931cfacd09a3cc82c7d433407ae1951b9dce03852e584e
1
61
2022-11-15 12:42:20
96109215e308d65d7ede6a738fc01c7e5bb04c32a057790fa3fb55b9f338a180
1
61
2022-11-15 12:42:20
2a0d5b68e0f734b0b8c903d62ba4a9d822f8060933d4ef985885c53c3827c530
1
61
2022-11-15 12:42:20
7bd910650f6142529b8363ab5bb7e266df53028ff6d15fddb05afa63584a2c3a
10
61
2022-11-13 09:09:14
a305e97c84497c2d808acae073b3db54cf303d637805d242f1179d90da46993b
2
61
2022-11-12 18:35:12
95dc5fb746b18c6d6c941c980c7f18f294686e8ee1b23375ba3b3ed34de887a7
19
52
2022-11-11 16:16:48
61feb8d8948c96684584dcddccc08bce82b70693f42f7e163b0e24af9563646f
0
61
2022-11-10 09:07:01
3df136a9a1e8713bc284fd623de6e80e2c391ae0c3fba97f51ce05f1761446e4
8
61
2022-11-10 06:55:11
0be176c0d7e65de817e75bfbe5413af827ad7bdcd9d1be210a22d7940034494e
1
61
2022-11-10 05:20:34
f898f041a900d4739e66d4db1ffabd466c92f8562ac31af2ccefd0b92eb98ec4
3
61
2022-11-08 06:10:59
44ddea59eb6d06f4f7c4aad840a137f83a2f8251ffd0f4bc84da03a5cfc415c0
17
61
2022-11-08 03:09:10
a8292a94d826b84b5341835c1440ae9ea5530cacb5e94fa624ef4d26a9bb76f0
3
61
2022-11-07 23:16:27
e7c50c78e20f91d484b54cc1714d948c0bb5e6294cb724b85845a5e38592169a
19
61
2022-10-27 17:09:23
5bada2c5f713f8dd0ef26c439340491ec4c863d6240f771b1752bdb058b0dcec
2
60
2022-10-25 16:26:31
45ce4562cca0df99c564965596f03e714e9cf0a1033b237145b6ddd8b9f7c2bb
0
61
2022-10-15 11:30:06
3764896770538f1393064392940fe41e2fed2e9ac21998e586ddaa527440b455
2
61
2022-10-13 20:28:53
b4c03328f97282a85d330123058ed86a9d5a60a1201a1b6f165e99bf57917cc6
2
61
2022-10-10 11:30:04
e224890430ffca1b94fa8fe4701962634490ef9410cc270579614218f4da0c68
0
61
2022-10-08 12:11:53
342adb9fb9aff46fb046115e8963cc8088d57e4459e69bdfe2c75278251f6433
2
61
2022-10-06 15:47:04
0dcf5d05c334abe3927fed8cb654bf53089fd4c8d1d70046aaf7b6e3bab9eb01
0
61
2022-10-05 14:58:16
f8034e8a3c21da59f234474e4df2d0f1ea2768b86c31dd189401066a7dbbfd0c
0
59
2022-10-01 12:54:35
2b555a01dbad37e01c3503103f1cebbd5d3bf95c9bee8826c3b3bad26f36419c
0
59
2022-10-01 12:16:57
17dcf3643429ffb7039919fb96c769410a8d62441bd7eec60bc5c7a93b2c87cc
0
55
2022-09-28 13:49:33
70e3ad4e6b935a67e310b35efdda9b07952d824361f276b72a3665e5a998d765
3
60
2022-09-27 10:32:21
6ae823b783b9a69e4a891b5676f3114bc3b1aeb839bccae993756a78a8aff933
1
55
2022-09-16 10:08:34
839533ffb52e39992829df17c47c867cb3b2055b84232dcaa05ba9813f4a12ce
9
59
2022-09-16 08:26:08
8ae08899bdd628be6d5db5c0c1190472df459054b4fb129b436194d87089590c
1
58
2022-09-15 01:11:23
b522cbb8b7a0043c73b7e39afa680cba0ac9cc5b23204c9ed6ab53708246c22f
0
58
2022-09-15 01:11:23
d6a97d39589e6d745fba8bf434b5732db5472db54bfea226d65e32f40ab16536
1
59
2022-09-15 01:11:23
ed94f680aab258242cd28ba11694ee136aa8bdcdc6547828bb765ac1793fc9a7
1
58
2022-09-14 14:49:20
a8d4a4597040968475fc709a8cc70d66881eca8976d10d9badf8dbbba5536d0b
16
59
2022-09-11 16:16:31
71f463e8d5c0f7ec6221a1cb9d5683766d5f7270ca80395bee5d0d00ec4ba0f3
8
60
2022-09-10 16:16:30
f527ef23bc84e6577521804642471afaaaebaedb28ca18536768ad1bab396b55
2
58
2022-09-09 14:07:38
00a186d3e72835232fa9d562c84689021d438fa1c31986fb4118b09261b8ec3c
1
58
2022-09-09 11:08:42
dfaa0172cd5f7af92b771bcfe5a3e6413c845baecc25034e9affc0e56360e35f
1
59
2022-09-09 11:08:41
812ef95028a3d0a41d16bf625d7083ab91b2df531484adee66ffd9a6d5651541
1
59
2022-09-09 07:21:50
1bf1143ba343a2c917b868c53c36ab9da7004fcc326422179e54cf2b181327f6
1
59
2022-09-08 23:55:30
ab688aee19a478edca608fba51e852074ca273e138af552fd7301ba0894c930e
1
59
2022-09-08 23:55:29
4020d6854eeffb5d5fcff8c4466b8107e149cbf9eeae39ee1538ffb23b0754c4
1
51
2022-09-08 23:55:29
4b3726dafb84c6d6f86589c64c93135f27d47589510d3eb2ae00f067c6931df4
0
59
2022-09-08 12:20:04
825d18d9dc856eb51afe2a01f38794725daed24b5d101c564fab494bc185ca43
5
59
2022-09-08 03:19:43
3ec981e6b1fcfebe945eaa9580383460f2d4711ba62c87bf51ff7658db3bc18f
8
59
2022-09-07 21:32:29
30ef6b7b33598d3da178576d2eecf46efd23285ef6d01282efed456ae9a0fca6
0
58
2022-09-02 11:12:52
536eaf65ff444484def3f3a09c942a2d43878a0c5f48d80eaf03c45551caece0
0
59
2022-09-02 11:11:49
0ba26d9255a5e3cd7dfc680487f935a06d8cc2380cc983a0f8b59e14c7c46d65
1
59
2022-09-02 11:09:38
9b3c2445e12f4ab8a0aa1e6182eeb658891cd20cef0812b92e0cbb1dcf16522f
2
53
2022-08-26 22:40:01
6fff55d00c3bf66888decb179051702a56845f9736da5a2ec6beaa315862f53d
4
59
2022-08-26 18:00:08
a407e8e106337b60e0ac4d71cb9de1501a33b52cf1a6709bef04b000c40b27a2
0
59
2022-08-26 11:43:35
5c839c7c7cd75c89f4c4d2a3d0cdcf2a44d7d341858b0491e42dc5c39d765f47
1
59
2022-08-26 04:42:30
a3f7ab6d97972553e30ae6054d8efdc7eff30955fbb825fc0def7187eaa54fc2
5
59
2022-08-24 22:53:16
a9e2f640cbe2cb3f5286891df8029bd9d45b0b7596c4a9799323778d6c6119fe
1
59
2022-08-24 22:08:03
92d293dcf0e0d48f96d6eda741520e0a9604be13fe3cd054880ddbfa1abdf1f1
1
59
2022-08-24 22:08:03
2e07d6f24a05d04ff490be48317f86dc0fa7887f5aa2155d9bceec1e81b21704
1
59
2022-08-24 17:08:44
c256ae1ba720fe51e86915e2c1ceea258547bb59143cc0d948c9283046c275d7
29
60
2022-08-23 20:16:13
90a263ed2255dd7d7570f9a6da4553c0ef923d6f5baa50526546d9695367c6f4
0
59
2022-08-23 15:06:29
1dac975229236a65db4e5eda971e9e0d703066be3dc5cf616e605d31eb80c6c8
0
59
2022-08-22 15:23:19
b839da4667261f4bf9f0f77a1d0712c42385d28bad35aae2873b71c88d684f40
0
59
2022-08-22 14:54:42
82f5e5f8fefc9ad618b154f1b843acbaa37a86d614ccebb50a3d16af77ada994
2
58
2022-08-21 05:48:25
85387ffc75c95c601758e1aa6fe01a92785f6ea2d7e61e933069c51cf3a07e40
0
59
2022-08-18 08:05:15
aa67a78fa927b0b0da29f3a2d18c09d840a551e8f2217791d9c80b1fe328b972
1
59
2022-08-18 01:09:07
cdf6eedcc004e885635fe3319c90ae3a62e4667ffff275450995dc79a13d83db
2
59
2022-08-16 17:51:03
9143f43b2c3df8b94d16233ca901a8486fd8f66e37dcd9a05f9308f999d441e1
4
59
2022-08-08 15:40:23
bcae2b073186009d34369b189c9bccf5741d2cd9379d545b94c11d996db68ef1
1
59
2022-07-31 23:41:00
2f03481af24c50f17ca6e334e27effa4d2b75de178a28059cab97692fc62beb5
0
58
2022-07-31 23:41:00
4e3f50d25b5d29d253ab8bc0e6958f86c78370f911796828864b75c4bc55a68c
2
59
2022-07-31 23:41:00
a441cff5ea6c9a6030507f69a5a02f8d97a6d5d851372067fd0b057818e3a10f
2
59
2022-07-28 22:26:57
61194b0abb221fbd6f3f0ee50d5d7fda5caba78fe21ac0449a205525182c6955
1
59
2022-07-27 03:01:19
a67d079588f8ff2a69f5980681a62aa325a0ccf0b189d7b746d6357cc5ffa194
15
59
2022-07-26 16:24:04
539cfc64ea74320e44cd7093db4997f981d9fc58ba94b053162a29b26d161967
3
59
2022-07-26 04:23:08
d482d318238e8b53ce69fc2944ed0cf33cc59d669abbde16351ac6b88927c4ef
2
59
2022-07-24 09:01:44
f9e4b2f993a35998370166b39cc558591762fac9f59e8709bca9f154b9d55899
3
59
2022-07-24 06:06:02
46a19865c8f9361a20e81381b1d73d6f15c132602421b82875c37a9f1051d0ed
2
59
2022-07-24 06:01:51
7d50e2dd9cbfa670e45444babd7992b8fddbc43620f4835fd33e0bd427fca23e
2
59
2022-07-24 05:59:46
8d2faed4692c2becd35c1c26f2d262654447461fe1e3fe34cc9792414b5601b2
1
59
2022-07-24 05:48:12
548370509cd9835dc5a16d8568ebb5704f49a1c49820fe8557da0636d77e529f
1
59
2022-07-24 05:47:09
a613a581fd1b0c54d12e0cfa94751c7558293a9450bd01b7272212774826d0ed
2
59
2022-07-24 05:46:06
18962151fcd95cf2a902989ff267b36f3bff213ab42789a0b263252171317c2a
1
58
2022-07-24 05:46:06
0b4b8beeafd2b98903f0afa8ed7659bfd690a0bfa11d92d5454b497a34de6027
2
59
2022-07-24 05:44:54
e95d8d942e65f0ef8e7e7485f5f3ae3c553b6779e4474f9271a9624e0342fc7f
0
59
2022-07-23 04:08:53
42f3f88d637dd1afc04b9a459668ce76d9ace6ad1b3e7d56f7e529e4af491cdd
0
58
2022-07-22 15:45:50

Rule Matches per Month (last 24 months)