WEBSHELL_PHP_mini_Jul20

Rule Info

Date
2020-07-31
Av Ratio
18.19
Rule Hash
5e5b9153cea71cd26db88725e343d427
Score
75
Description
Detects webshell from a bigger webshell collection - file mini.php
Name
WEBSHELL_PHP_mini_Jul20
Required Modules
[]
Tags
['WEBSHELL', 'T1100', 'T1136']
Author
Florian Roth
Minimum Yara
1.7

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
23
Suspicious (< 10 engines)
37
Clean (0 engines)
0

Rule Matches

Hash
Total
Timestamp
Positives
VT
73df70f6cce9b41f456950a58106aa2ea055599e03520392cbf0bfa14ace33e6
60
2020-10-16 17:22:12
8
3a1ee7f1ad114118ed7030be811b337851c682606f55e61cb9ed53fe7801e9bd
59
2020-10-13 18:39:22
6
af375be5dcc14b05d58791acc646772b159e11143ea596dbbbf84d57cb440c01
44
2020-10-12 18:06:54
2
9dfe64cd6307fb92cc1b475aeb5cb53605474313f8c5ddf6972ad809f62f082e
58
2020-10-12 18:03:47
5
1f503921a0f1716314f7cf79fbb15fff0e1790178b3accc22957f4cb54241225
58
2020-10-12 17:56:18
6
829b01fd0faa47c021903fc622c89fb989a5e70dc61a8b695e28a38a192874a1
58
2020-10-12 11:04:41
8
11b95854a94d9d938a07f841582d8c3e45737282935834f78b791a99778fc1b1
59
2020-10-12 11:03:00
9
896ca37801aa3e6f61ebd5957c4440949d7d39465a720cc8ef51802d8168bf73
59
2020-10-10 18:32:41
4
0cad2ced12ea2315980664ef0b5da25d60e18bff9441f12f67e85c52fa49217d
59
2020-10-10 13:34:05
8
b68d1c59497a1bd00d36abc3dcd32b5ac160a0f930b19d9481aa5c421ea1e494
59
2020-10-07 15:52:36
10
a028fe94a83846666ec974858398dbdcfd6fdd29bd995619a1f2542f611d62d6
57
2020-10-06 11:13:23
6
921d45b257d7c06aefec595f2e7c104a3029b1f88dcabac4ec50c2bf2e95866b
59
2020-10-06 09:32:09
14
422f8121d6b3b32ed6f1f79ac1ff82e79729b4b56bb33f21999cbf8a86f95e3f
59
2020-10-06 09:26:23
16
14eb1fe2f986b76d5cafa55182bb48cddf9894b11589a13421e83e789c870773
59
2020-10-05 08:46:14
9
beebbb3f97d83429d0e8235dd4f9e3fca5170f2d47c97fb5a84a935cdea66e16
58
2020-10-03 12:16:10
2
03253103411c247b46ae009264ce0a8b43974697f8fc008513182b13af2e39b7
60
2020-09-30 01:25:30
12
b1421dcff2dc999b729f54cb559bc81b5377121a6fc7e8de6f280e00a352c8ac
58
2020-09-29 17:55:53
12
8405f16e7b8943904d8dd8389fe78682002a3b6fab0ac9f8121907361f46d8b8
59
2020-09-28 11:11:03
9
81a8daac6e285687a89d8186a36dfa855d07e1482188b8b74b4a6d5bfc05b69d
58
2020-09-24 01:30:31
7
23969c99bc94699d351f158c5d95279a0878f7873ca01d86ba145b992f173ff4
57
2020-09-21 22:28:18
7
14bb4e91e31bfd8fcfcbe0c2ab1bb2dbcb653c38eddf7cd0fe47cc228ec7a479
56
2020-09-19 18:40:32
41
34d75a8ba03628353d7c5f5993b29a338aea76d0b97db0b0b26c7b59d897f2ad
56
2020-09-19 18:35:50
41
fabdd8569ca80703013b818cad7e46a915c967a2415bd30571a59e150503359a
59
2020-09-14 12:03:30
14
4c143fad7adcf3dd94667798f8d6c33cb69d93c0e095af6d341f82b422c19819
57
2020-09-14 11:12:55
8
5a12db6e5a00e45ba98ff9db85154f31351104d9d58bc22fed1b8fbf30b8388c
58
2020-09-12 08:36:51
5
ccf070e5b1080c66c4167796abf85c654f03fed88ee399aa60e5ef5387535a58
57
2020-09-12 08:07:33
18
4a26f39b329d7c10a8c97f817877be29c4b5cc9468ca05937a71e6eabd8b20ff
56
2020-09-11 14:56:03
15
08c7e5f7d8d6d3d9923cca4228827bb68d7bf14c64a98723023217a330af56c2
56
2020-09-10 04:57:44
9
64ba3226df374ed27976d2c8aafe1601927e071c356ba1ed8e5ea39f55f788e2
56
2020-09-06 16:45:43
7
a5cda768089933d4c65981ed70cc823b30a963717c360b9b7f1f28b79cb9d5c0
57
2020-09-06 02:17:10
11
309c4cac9a314a56f95efbf27942c0cb47966a09fd027b315b110bda679725fb
58
2020-09-05 15:35:51
6
160f8b952948a3020b9c75ab2b8a1b4aae4751ad2a15db24af87006b120d2782
57
2020-09-05 12:28:59
7
731f657146053d4b4a86f83f7aeece18e7428f310ccf74bf83e8af4a52d9ac3a
57
2020-09-04 13:07:56
11
4d2b1c2a76f08d3d19a64218666212953f88d5f480aee0afd5774f08f9c0eebe
58
2020-09-03 23:05:32
11
882c4559eff14ddee3728f5428a9eda2405de1fd28f2730ec26d93567a18444f
57
2020-09-03 13:28:20
8
74925ae53a0267d87897700c95a73d379beb9ec83a0e8e1811be317a37e74148
57
2020-09-02 23:21:53
24
00b901867008acc206eaf25cb3af6b51f1cc2b1d60ad9892376018e410aefa24
54
2020-09-02 23:16:10
23
a10203330cf2c359b3ecf0caa85a81d911a3c8c439ac9b8ddf9544896a2c1c5b
58
2020-09-02 19:51:50
6
27a8defb84199e5504d80992c9c2d0dbb05d30b93aa88a0c6db7ad7a41186395
58
2020-09-02 16:01:48
6
04d3afd875258b9ea6fc18c40aa9aa98929535e5490ed46498f01781089db44d
57
2020-09-02 13:39:30
9
e35060fc961ffd1a9a0b07a383d45d57d0241ec2b2017e77ea0343637ba2f2cb
55
2020-09-02 11:04:09
23
954d5aa8574f98e670155c6e49a1f9819f0506db3d542c8bdfdaeae29ef0c93b
56
2020-08-29 11:20:56
5
5a86d02a817beb5941b333c504bbfc39a3e2474f228e5bba13301c3d9237d781
55
2020-08-28 12:52:37
8
842aee2c94af23e05a43a84e326bb2823f38691bcaf1ee208b7bf16257c2a88e
53
2020-08-25 01:46:16
6
046dbc16aef6471ab706e631c0890346b9dad748f7415dcf125b83877b8a858f
57
2020-08-20 13:06:13
6
26d0717fdbf62b7cf213ee334e804b18e36be516ae955cc0c813eb73d70295b3
58
2020-08-20 06:24:50
10
28380ca358e00f73bece233e68986ffead67218e5f6f1caae10167c6d784fc24
59
2020-08-19 23:03:48
11
e5f99be913a07b951b2a0f21cd37c94751aa739e9cc3bb384988ae121be5e4f4
57
2020-08-19 00:02:27
7
b1046e18eee3a9e29f1f4140ca2ff14a51dc191cfe541bbb51604a932b31c7b3
56
2020-08-18 03:27:54
5
2d174f13fd4fb70e9e7f284024e23edb7985fc145a2cc72b43843cc2a8175aba
57
2020-08-16 18:22:12
5
1fed0bc8c429aac187d05514e3defe177054085e31c2229cf901732cffa5f093
58
2020-08-15 07:23:50
5
aed726d9cc4a1243673a2f5df9d0604d511cb6bd0e213507d50b3a937bb21842
58
2020-08-14 16:56:11
6
7d38e48ca2f21281049ddcd64fb65b478a4cb5fa83630ffaf789ab46e7959a7c
58
2020-08-14 11:13:07
4
06d2fb9bfa675bf7765823ab27707f996329453eee240bfd520794ed5a6d909b
57
2020-08-14 06:15:26
10
e4a9da8bbb47ceea7d08a03f9d0c9cc697794e12b3f6b85126f712cba77d74c6
58
2020-08-13 04:58:14
12
6d1db244a4fcef24d9e33201711c2bda507bd621476961427b78f108b21e928f
59
2020-08-09 02:46:02
7
45988e6278bc61803ca7277a08910108b04d8f689b0b5f706ba881fbbd3575dc
60
2020-08-07 06:44:34
13
8b471a880d66b4209765baf4baade66edeb8056db1a2e49fc56fc4a56678cfad
57
2020-08-06 16:53:35
7
098e8c33855ca8f9aad08198132b8073b43e84b9a3778aa5e09bb8e4e3beaea0
59
2020-08-06 16:45:58
14
ed4f9b2baf5272c4e5f26e32c81a4659594567b4192d63365125d163b937a07d
59
2020-08-06 10:30:21
21

Rule Matches per Month (last 24 months)