metaslsoft

Rule Info

Name
metaslsoft
Author
Florian Roth
Description
Detects Webshell - rule generated from file metaslsoft.php
Score
75
Reference
https://github.com/nikicat/web-malware-collection
Date
2016-01-11
Minimum Yara
1.7
Rule Hash
f97ea9b9ce150095d9f5caa59c8f4b07
Tags
['T1505_003', 'WEBSHELL']
Required Modules
[]
Virustotal Matches
https://www.virustotal.com/gui/search/metaslsoft/comments

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
14
Suspicious (< 10 engines)
3
Clean (0 engines)
0

Rule Matches

Timestamp
Positives
Total
Hash
VT
2024-09-10 14:43:04
22
63
328b2b7e04252140da01e3f77a72a64a7a47e2b2d9327ec410799299d2d96bc6
2024-07-05 09:01:13
23
63
4ea2e67fed7e74500e4e288239b6301816dbb933df9846a910e6f95ee87ac814
2023-02-13 08:21:28
26
60
e857b9cdf6d219d789bd88a80494c946c657d41fcc92360b5926653d2ae134d1
2022-03-12 18:40:57
5
55
79bc3f3c5b5ab03fab66acd52e338aff94d02b95d4683e9a42e150951b78d01e
2022-03-03 18:40:47
18
58
5749acb898541c17ff5212877cb776ad64eec5eb938410d3f19873d2857f66c6
2022-03-03 18:39:22
7
57
263ab15a23a1471d607c0ac82443f2ecac5fbb125ab4da81320520dd1ad97ff2
2022-02-04 22:10:46
17
57
8e062df17c61c35db6439c45e81d08949a6163f7ea54c8154ed6912a769ba3f5
2021-10-20 09:27:27
15
57
8fda9d64ee6dac398e104ff77390f65edd4abde0007fe6b3bc53a98d1768f519
2021-06-23 10:16:05
18
59
a51df6f005cdbd49b93cbb008fc1508686eae348c16d83ca9a7aea3049f07c09
2020-09-11 08:15:15
17
58
b49553777c7999bd0bdc7b275598661397f0a7b0f542e7902e77d71fb8aa91b1
2020-05-28 09:09:16
8
60
f5c16b8bb07aaaa388020b67b5aefe164bf1de9840d5a7573ab68825c4a20f25
2020-05-18 15:23:29
20
59
24b577b425a9c79b0c3fe870de1cf9416024893cc8071040ed438e1c264fa0d0
2019-12-10 10:22:06
16
58
cb9b5c54f963f3358ad34ff53f51813331f610596b12337d6e4c2e51a2fbbe2f
2019-11-01 13:27:54
18
58
5823ba3a6f650e3c92cb6721ce97cd0b185f6e93707305e2393596f03615c8e9
2018-10-31 13:54:08
14
55
278f1a7aa99dffc2132f604a66a4f962153608dc31f102f3b5036e9db1888928
2018-10-24 03:01:09
16
55
39abc163cfcf239a9d44c0ad7f2e6debb70a2f5f821a35fd7bbd85bf09c9fd9d
2018-10-22 06:23:11
13
57
374dfef917872d886c316b864558413d5c11988fc148c3a0819090a67ee32145
None
None
None
e0c56d7526699d8845bf6cedf236424959adedd93c194ba05fec93b6b8d85988
None
None
None
fb19182ad13816e3f69e57f08ed00a759bcdc104471be35ed06d270c171d1f68
None
None
None
b9ddd9fdf82a34a591f1063e7e5e46b64533cde222df6907f760eec097273727
None
None
None
2f64baa9a60ff7e4114c278a8538dc6807c52b5aed17a158cd6e4bbc89df93e3
None
None
None
bc308b6fd9c886190f3a63997276c60e21d0191f0d28622e105681f1ca20dfc3
None
None
None
5479f8cd1375364770df36e5a18262480a8f9d311e8eedb2c2390ecb233852ad
None
None
None
2f64baa9a60ff7e4114c278a8538dc6807c52b5aed17a158cd6e4bbc89df93e3
None
None
None
b9ddd9fdf82a34a591f1063e7e5e46b64533cde222df6907f760eec097273727
None
None
None
bc308b6fd9c886190f3a63997276c60e21d0191f0d28622e105681f1ca20dfc3
None
None
None
5479f8cd1375364770df36e5a18262480a8f9d311e8eedb2c2390ecb233852ad
None
None
None
660002af47e3148522612a4bbb1c41089122a76d6fe12605affa16fbd8f64a1d
None
None
None
4a84c293927779fba03f1947803557c22ba6ad4b10dcc9780827df5cdeafa2ed

Rule Matches per Month (last 24 months)

THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022