_20161124_00268dd53673b6aa795df0fda8a300fe_20161124_00b298025290_209

YARA detection rule by HydraDragonAntivirus · GPL-2.0

datamaliciousorder - from files 20161124_00268dd53673b6aa795df0fda8a300fe.js, 20161124_00b298025290bcfb13a0a6bf3455a8f2.js, 20161124_025de06b123f34b898236205bbde6eb5.js, 20161124_029e7f15feba4a1206fd1eadb567a65e.js, 20161124_02e6560e0b5e7e937ec1da47daff30e2.js, 20161124_03ee9ec4a4b57759524ca89a51f1932f.js, 20161124_0622610d21c039acec994c1a416def27.js, 20161124_06ee7f6703784902ad8f80bd9836a963.js, 20161124_093e0de60ee153991719c101da7a928e.js, 20161124_0a1748dd4c0819574032cb4cf83655f1.js, 20161124_0a507655901dac4fcdb1af98cc4b65ca.js, 20161124_0cd83ec2882306c337758917a4b4dce4.js, 20161124_0d26828b36ce11e040a9bcbecc532a4d.js, 20161124_0d3add21303059101c24671cb30d2c16.js, 20161124_0fedeae4185108c5b6a8942e50e58406.js, 20161124_103c433af49d97746935d91fac5a4543.js, 20161124_116d12c1a65ba1402a6675a26606abbd.js, 20161124_142ec8636a6ca5ac78484f8c61301bc5.js, 20161124_161ee3199afcf16c0de0504ae3fa2fed.js, 20161124_163505728d144453aaf2cc325415ffcb.js, 20161124_164500c21afc3b7039071fc776ebff6a.js, 20161124_16b74fad5e30444cabb742eea4c506cf.js, 20161124_170fec34b4b4d146fea05fd79ebcd234.js, 20161124_19ac82d0e2c2d0bcb3e31c8136eb9bf0.js, 20161124_1a47a9c3f0a3a36421be3c0496c15912.js, 20161124_1c1e005cd1bfc73959a4ca767de02b28.js, 20161124_1dea4a2274114d535b9013edd61c16aa.js, 20161124_1e56060be7d393343643fcaf40eb98f3.js, 20161124_20d46226f74dd3418d2500459e0e905e.js, 20161124_21bebe46cdebc9e8278421acdc5f21bd.js, 20161124_24d839c8b06f1927424aad4681949f7e.js, 20161124_25ef0b072b0b48bd8b5ec31f2792e83c.js, 20161124_261636fcf87711f7dfa7f024937f3eca.js, 20161124_26e2db84a2945833d665afffc083841b.js, 20161124_295413c93b6ea11a00c5353ea7dfbcb8.js, 20161124_298382bb11e4d5ea72e0a7cd6672de44.js, 20161124_2a733f5925ba6020e055a8878b51527a.js, 20161124_2b4b05c0041de7f28656de0db08aeee8.js, 20161124_2c33e9101f2866d0a1dce8c5c31abc20.js, 20161124_2f72feb21f027a13c07226bbbb3ca7c1.js, 20161124_2fca66630dc86bbc32ac6ba87f34dfe7.js, 20161124_30c18919e3e10f1139ce1ed0a8db8f4e.js, 20161124_30f1ec3d3e67dded3518dedd93b69621.js, 20161124_321445fc88675640945f48f309f4e13f.js, 20161124_36b61d7535da89fda2f85dcef410c0fc.js, 20161124_372ad3846f34447b4cc3c54a5253fb92.js, 20161124_37374b93126cc140105ce9c2cff9d19b.js, 20161124_38f5eb654defeb71a4bd5a84b070f58a.js, 20161124_39ed56272cfcc72b99fead38df23084e.js, 20161124_3a6fc1a5f7a7259c2ca856c17a32773b.js, 20161124_3a8bf8095e9b40f74a4975bd209fd4b1.js, 20161124_3af32c6d2bd51c48978e4830bb0f2e6b.js, 20161124_3b240d19b281ae6d675604223f832a8e.js, 20161124_3c5fffb669249a6d3bee67a15a164a80.js, 20161124_404f682f042d39a63eb1d0d3915a41d1.js, 20161124_40f8274ed4bebc9ef17c258740829b11.js, 20161124_42d4b39938b75ddb234c821adaecb836.js, 20161124_44e88f67c2df575871f4946c78c187c5.js, 20161124_455f96ba25e8bd54e73c0130ef006634.js, 20161124_467cb7c1ce2423c9740f8a5aa270b6c3.js, 20161124_47f8717cbf644f389a0d0775c4a5cf9c.js, 20161124_4824dc7d5530e7aadb16e90acb5a4321.js, 20161124_4a32208a7daf2a56fb49a57a1b57e0d6.js, 20161124_4c5cac1ee9994f0b6e8b1138bf67eef5.js, 20161124_4eacf62100c7e3f2374e9d6754409d41.js, 20161124_4eb64b1123387479714587ed47559189.js, 20161124_4f0708423a65f703effb353592223a14.js, 20161124_5087883e47d123379c00c8bbdd1cdfbc.js, 20161124_53cb96f5bcd0abdba14c525f5718d6d8.js, 20161124_548352ab8dadb951f0ee0acdbde12063.js, 20161124_55745a32e01ad9e8413a0ce00ffacc77.js, 20161124_55a5ec34c191b93c6008d15477524fae.js, 20161124_5867f35a122fa7e2464567f8690923f8.js, 20161124_5e11c818aae3a7e3aa9241ab96af7cdf.js, 20161124_608d25fbbbdaff5b396882cd8f5533b1.js, 20161124_611a9faa86af908e9251957e3be02aef.js, 20161124_61237a0312db3d670f148bb171167d6a.js, 20161124_614845ae28b357314caae5e81bf1f8f6.js, 20161124_615fa53695e373bef6b180aeb769926b.js, 20161124_625345c67f92e6b627e40cbf4042e602.js, 20161124_62bf7a223fdf28485de6757112f94110.js, 20161124_62dfddc56a6eed1ae486f5dd699fbd41.js, 20161124_63084d9956e41da711b739e50b4dcc02.js, 20161124_636382e1bbd8e039e36e93d879563ef2.js, 20161124_67bc3d80065d703bd1d2fb54f599705b.js, 20161124_67c01087c1e10b54949f6ed82b7f66b9.js, 20161124_69c74f0761dbb812be58fdefcdf9a42c.js, 20161124_6a119d634a3ace0f942d8d56c12b6649.js, 20161124_6c43c0bc34cdfc514e6bef26a0ab0f05.js, 20161124_6d28d7e402463e68ed9c0f9e9663db2c.js, 20161124_6d7c27562e4d4d3787eedbff866a50df.js, 20161124_70149231cd1db3fa9f26ec6d535bda7c.js, 20161124_70da73a22b6a6f7caeb2df10ce9fdcab.js, 20161124_755ac59e806d6b874fbac7694aa41237.js, 20161124_758b01aa4c2a3693e84ab1b67c2111ad.js, 20161124_77431421bd32760ec0b7ec85d9abcf92.js, 20161124_7791dbd851713310cc7780042c1cadb8.js, 20161124_77d0067f07f8b8e54166d30fb052d7f2.js, 20161124_780816b64da3496b154126b77162fad8.js, 20161124_783b8b0400c20efd78c43a77d939cc49.js, 20161124_7a32eab7cab653691d910f7f8e3f9f13.js, 20161124_7ad22c3ffc584f6e7f162f3717d765d2.js, 20161124_7af048b1c3843102358e703e4edec557.js, 20161124_7b844a0145768852d2c51ce8539b6c55.js, 20161124_7bd22c89303622a81161f08c7d49c469.js, 20161124_7cbabe67f9042c67df42f160dca1f26a.js, 20161124_7db6da1111f6d2a03331fdd95f377d40.js, 20161124_7e02a6f230fbc51f1a1e2e7bc317a46d.js, 20161124_7e66f5dde17c7cca42b1f7e18014a4f6.js, 20161124_7f5e4e00f434e4db53ad88397200c4e9.js, 20161124_80b243f6e85c2ed44e813c0bbb32358c.js, 20161124_8494db90cfa08b899535223c01d49452.js, 20161124_8631a76fbfae204a2537cd6878609444.js, 20161124_877f927f6cd69d1052b7521ff31a5056.js, 20161124_888af05e02e4fdc5b78144ffe501abaa.js, 20161124_8bb6b67064f264e62df12feca7cdce8f.js, 20161124_8dc633c2236b54e3af4382d894ae4e29.js, 20161124_8ea486075bcc2e41a9b1bdf48559511c.js, 20161124_8f8e5b0c932f693f23e35fad22753a47.js, 20161124_8f98aae463ffc23f137abc8bf8835a12.js, 20161124_918bcd6f258e8a0c2d037fe13c5c41c0.js, 20161124_9205135e30d61f1ce06d9b0f8ce66100.js, 20161124_9752fb3b34c7c538addd9498bf3add01.js, 20161124_97f3d2d5df99e821630a869209104faa.js, 20161124_993d9ae0586ced708644c56cd62aba92.js, 20161124_9c7a3ddf0b6054a3966bc8938cd788f1.js, 20161124_9c8ff21713ff3aab51f58043cac90941.js, 20161124_9dc9f3004ff01cccf0cf23a002d31248.js, 20161124_a0c4063921101b5be60bbbb9c0bd28f3.js, 20161124_a10be17c1e23a123c07fa778fc95499f.js, 20161124_a1dfaacf03575c192b479419e0aeb52b.js, 20161124_a27dd9008a85c7420133dd5cc0c75a24.js, 20161124_a331fa65c16c6564441c1bac6848ad8a.js, 20161124_a43c7c52062640a875484df0379a9c40.js, 20161124_a606433be7d76f3fe520cbf1bf33f3dd.js, 20161124_a7112e471c905f8a920fdcc422d64d76.js, 20161124_a9b972eba396234209a2bc6bc4c9f217.js, 20161124_aa74d5ec8d906f3e5723aed61d3251b4.js, 20161124_aacbe676f7068507396209c826bdc7de.js, 20161124_ab07c43a060a774b6d4b8a08e85a73cc.js, 20161124_b0fbd96d23dab30010d15eb06df2e95f.js, 20161124_b373aa2d744f9597f58a2f994c91fead.js, 20161124_b556038986f69db6aa9a8ccb37c57382.js, 20161124_b5a1b25dc2e4a106d5f75df3173ca777.js, 20161124_b5b00ff32650e7c9dfaf918221f5595f.js, 20161124_b5ddd1a5545e8f9e9d757716fdae2e67.js, 20161124_b66e1864a31a93997b11a7e6b170da3f.js, 20161124_b6cc6fb4d705a412a5dbcff17915b0db.js, 20161124_be60fe6fddac8112f896762b14f7b796.js, 20161124_be65be525882769f86fda66b01904919.js, 20161124_bfc79b18b3a2d2880911525b4e5a54d4.js, 20161124_c42c7d36968207bd8b93d38485a91760.js, 20161124_c5f60343af78147413046df235810591.js, 20161124_c6d74032016fdffae2c9c2dba4cf570b.js, 20161124_cc401d15ac53a19d56b55eaa988086a6.js,...

rule _20161124_00268dd53673b6aa795df0fda8a300fe_20161124_00b298025290_209 {
  meta:
    description = "datamaliciousorder - from files 20161124_00268dd53673b6aa795df0fda8a300fe.js, 20161124_00b298025290bcfb13a0a6bf3455a8f2.js, 20161124_025de06b123f34b898236205bbde6eb5.js, 20161124_029e7f15feba4a1206fd1eadb567a65e.js, 20161124_02e6560e0b5e7e937ec1da47daff30e2.js, 20161124_03ee9ec4a4b57759524ca89a51f1932f.js, 20161124_0622610d21c039acec994c1a416def27.js, 20161124_06ee7f6703784902ad8f80bd9836a963.js, 20161124_093e0de60ee153991719c101da7a928e.js, 20161124_0a1748dd4c0819574032cb4cf83655f1.js, 20161124_0a507655901dac4fcdb1af98cc4b65ca.js, 20161124_0cd83ec2882306c337758917a4b4dce4.js, 20161124_0d26828b36ce11e040a9bcbecc532a4d.js, 20161124_0d3add21303059101c24671cb30d2c16.js, 20161124_0fedeae4185108c5b6a8942e50e58406.js, 20161124_103c433af49d97746935d91fac5a4543.js, 20161124_116d12c1a65ba1402a6675a26606abbd.js, 20161124_142ec8636a6ca5ac78484f8c61301bc5.js, 20161124_161ee3199afcf16c0de0504ae3fa2fed.js, 20161124_163505728d144453aaf2cc325415ffcb.js, 20161124_164500c21afc3b7039071fc776ebff6a.js, 20161124_16b74fad5e30444cabb742eea4c506cf.js, 20161124_170fec34b4b4d146fea05fd79ebcd234.js, 20161124_19ac82d0e2c2d0bcb3e31c8136eb9bf0.js, 20161124_1a47a9c3f0a3a36421be3c0496c15912.js, 20161124_1c1e005cd1bfc73959a4ca767de02b28.js, 20161124_1dea4a2274114d535b9013edd61c16aa.js, 20161124_1e56060be7d393343643fcaf40eb98f3.js, 20161124_20d46226f74dd3418d2500459e0e905e.js, 20161124_21bebe46cdebc9e8278421acdc5f21bd.js, 20161124_24d839c8b06f1927424aad4681949f7e.js, 20161124_25ef0b072b0b48bd8b5ec31f2792e83c.js, 20161124_261636fcf87711f7dfa7f024937f3eca.js, 20161124_26e2db84a2945833d665afffc083841b.js, 20161124_295413c93b6ea11a00c5353ea7dfbcb8.js, 20161124_298382bb11e4d5ea72e0a7cd6672de44.js, 20161124_2a733f5925ba6020e055a8878b51527a.js, 20161124_2b4b05c0041de7f28656de0db08aeee8.js, 20161124_2c33e9101f2866d0a1dce8c5c31abc20.js, 20161124_2f72feb21f027a13c07226bbbb3ca7c1.js, 20161124_2fca66630dc86bbc32ac6ba87f34dfe7.js, 20161124_30c18919e3e10f1139ce1ed0a8db8f4e.js, 20161124_30f1ec3d3e67dded3518dedd93b69621.js, 20161124_321445fc88675640945f48f309f4e13f.js, 20161124_36b61d7535da89fda2f85dcef410c0fc.js, 20161124_372ad3846f34447b4cc3c54a5253fb92.js, 20161124_37374b93126cc140105ce9c2cff9d19b.js, 20161124_38f5eb654defeb71a4bd5a84b070f58a.js, 20161124_39ed56272cfcc72b99fead38df23084e.js, 20161124_3a6fc1a5f7a7259c2ca856c17a32773b.js, 20161124_3a8bf8095e9b40f74a4975bd209fd4b1.js, 20161124_3af32c6d2bd51c48978e4830bb0f2e6b.js, 20161124_3b240d19b281ae6d675604223f832a8e.js, 20161124_3c5fffb669249a6d3bee67a15a164a80.js, 20161124_404f682f042d39a63eb1d0d3915a41d1.js, 20161124_40f8274ed4bebc9ef17c258740829b11.js, 20161124_42d4b39938b75ddb234c821adaecb836.js, 20161124_44e88f67c2df575871f4946c78c187c5.js, 20161124_455f96ba25e8bd54e73c0130ef006634.js, 20161124_467cb7c1ce2423c9740f8a5aa270b6c3.js, 20161124_47f8717cbf644f389a0d0775c4a5cf9c.js, 20161124_4824dc7d5530e7aadb16e90acb5a4321.js, 20161124_4a32208a7daf2a56fb49a57a1b57e0d6.js, 20161124_4c5cac1ee9994f0b6e8b1138bf67eef5.js, 20161124_4eacf62100c7e3f2374e9d6754409d41.js, 20161124_4eb64b1123387479714587ed47559189.js, 20161124_4f0708423a65f703effb353592223a14.js, 20161124_5087883e47d123379c00c8bbdd1cdfbc.js, 20161124_53cb96f5bcd0abdba14c525f5718d6d8.js, 20161124_548352ab8dadb951f0ee0acdbde12063.js, 20161124_55745a32e01ad9e8413a0ce00ffacc77.js, 20161124_55a5ec34c191b93c6008d15477524fae.js, 20161124_5867f35a122fa7e2464567f8690923f8.js, 20161124_5e11c818aae3a7e3aa9241ab96af7cdf.js, 20161124_608d25fbbbdaff5b396882cd8f5533b1.js, 20161124_611a9faa86af908e9251957e3be02aef.js, 20161124_61237a0312db3d670f148bb171167d6a.js, 20161124_614845ae28b357314caae5e81bf1f8f6.js, 20161124_615fa53695e373bef6b180aeb769926b.js, 20161124_625345c67f92e6b627e40cbf4042e602.js, 20161124_62bf7a223fdf28485de6757112f94110.js, 20161124_62dfddc56a6eed1ae486f5dd699fbd41.js, 20161124_63084d9956e41da711b739e50b4dcc02.js, 20161124_636382e1bbd8e039e36e93d879563ef2.js, 20161124_67bc3d80065d703bd1d2fb54f599705b.js, 20161124_67c01087c1e10b54949f6ed82b7f66b9.js, 20161124_69c74f0761dbb812be58fdefcdf9a42c.js, 20161124_6a119d634a3ace0f942d8d56c12b6649.js, 20161124_6c43c0bc34cdfc514e6bef26a0ab0f05.js, 20161124_6d28d7e402463e68ed9c0f9e9663db2c.js, 20161124_6d7c27562e4d4d3787eedbff866a50df.js, 20161124_70149231cd1db3fa9f26ec6d535bda7c.js, 20161124_70da73a22b6a6f7caeb2df10ce9fdcab.js, 20161124_755ac59e806d6b874fbac7694aa41237.js, 20161124_758b01aa4c2a3693e84ab1b67c2111ad.js, 20161124_77431421bd32760ec0b7ec85d9abcf92.js, 20161124_7791dbd851713310cc7780042c1cadb8.js, 20161124_77d0067f07f8b8e54166d30fb052d7f2.js, 20161124_780816b64da3496b154126b77162fad8.js, 20161124_783b8b0400c20efd78c43a77d939cc49.js, 20161124_7a32eab7cab653691d910f7f8e3f9f13.js, 20161124_7ad22c3ffc584f6e7f162f3717d765d2.js, 20161124_7af048b1c3843102358e703e4edec557.js, 20161124_7b844a0145768852d2c51ce8539b6c55.js, 20161124_7bd22c89303622a81161f08c7d49c469.js, 20161124_7cbabe67f9042c67df42f160dca1f26a.js, 20161124_7db6da1111f6d2a03331fdd95f377d40.js, 20161124_7e02a6f230fbc51f1a1e2e7bc317a46d.js, 20161124_7e66f5dde17c7cca42b1f7e18014a4f6.js, 20161124_7f5e4e00f434e4db53ad88397200c4e9.js, 20161124_80b243f6e85c2ed44e813c0bbb32358c.js, 20161124_8494db90cfa08b899535223c01d49452.js, 20161124_8631a76fbfae204a2537cd6878609444.js, 20161124_877f927f6cd69d1052b7521ff31a5056.js, 20161124_888af05e02e4fdc5b78144ffe501abaa.js, 20161124_8bb6b67064f264e62df12feca7cdce8f.js, 20161124_8dc633c2236b54e3af4382d894ae4e29.js, 20161124_8ea486075bcc2e41a9b1bdf48559511c.js, 20161124_8f8e5b0c932f693f23e35fad22753a47.js, 20161124_8f98aae463ffc23f137abc8bf8835a12.js, 20161124_918bcd6f258e8a0c2d037fe13c5c41c0.js, 20161124_9205135e30d61f1ce06d9b0f8ce66100.js, 20161124_9752fb3b34c7c538addd9498bf3add01.js, 20161124_97f3d2d5df99e821630a869209104faa.js, 20161124_993d9ae0586ced708644c56cd62aba92.js, 20161124_9c7a3ddf0b6054a3966bc8938cd788f1.js, 20161124_9c8ff21713ff3aab51f58043cac90941.js, 20161124_9dc9f3004ff01cccf0cf23a002d31248.js, 20161124_a0c4063921101b5be60bbbb9c0bd28f3.js, 20161124_a10be17c1e23a123c07fa778fc95499f.js, 20161124_a1dfaacf03575c192b479419e0aeb52b.js, 20161124_a27dd9008a85c7420133dd5cc0c75a24.js, 20161124_a331fa65c16c6564441c1bac6848ad8a.js, 20161124_a43c7c52062640a875484df0379a9c40.js, 20161124_a606433be7d76f3fe520cbf1bf33f3dd.js, 20161124_a7112e471c905f8a920fdcc422d64d76.js, 20161124_a9b972eba396234209a2bc6bc4c9f217.js, 20161124_aa74d5ec8d906f3e5723aed61d3251b4.js, 20161124_aacbe676f7068507396209c826bdc7de.js, 20161124_ab07c43a060a774b6d4b8a08e85a73cc.js, 20161124_b0fbd96d23dab30010d15eb06df2e95f.js, 20161124_b373aa2d744f9597f58a2f994c91fead.js, 20161124_b556038986f69db6aa9a8ccb37c57382.js, 20161124_b5a1b25dc2e4a106d5f75df3173ca777.js, 20161124_b5b00ff32650e7c9dfaf918221f5595f.js, 20161124_b5ddd1a5545e8f9e9d757716fdae2e67.js, 20161124_b66e1864a31a93997b11a7e6b170da3f.js, 20161124_b6cc6fb4d705a412a5dbcff17915b0db.js, 20161124_be60fe6fddac8112f896762b14f7b796.js, 20161124_be65be525882769f86fda66b01904919.js, 20161124_bfc79b18b3a2d2880911525b4e5a54d4.js, 20161124_c42c7d36968207bd8b93d38485a91760.js, 20161124_c5f60343af78147413046df235810591.js, 20161124_c6d74032016fdffae2c9c2dba4cf570b.js, 20161124_cc401d15ac53a19d56b55eaa988086a6.js,..."
    author      = "HydraDragonAntivirus"
    reference   = "https://github.com/HydraDragonAntivirus"
    date        = "2026-04-26"
    hash1       = "9b1dde1be4dfd10bc8b0e3305adb70fb5922a4613465ba6c4a737e79eefc5e64"
    hash2       = "c8f843475ee3c9610f4ed13a9b0c87696dfb564675c8552af6ce9a2c76220ba0"
    hash3       = "d4906fd9e99d187019aa91c74dc3728fe21045b59db1844e40c7b6889ded693b"
    hash4       = "ab77c6614c2bc400e8f3a5879de3b3e23a624af4e238efa9bbe6c1d89c731c21"
    hash5       = "f95aa8322b9a4c07752f4f9de73dedc33e68ea1d1c9ff269b05b21453dcd3d29"
    hash6       = "3725251f5c0fdddb0539ac74918c705c4a4f0032aae6205457268e4c3b290bdc"
    hash7       = "8cd9a700b81c125bcb789965715cb51cf302a43d4821851c734def416fd3e316"
    hash8       = "8f9bc1a54ec3397ebb73d0dda2ff26a7d3ac3524a39c042fb1e802e493f88ce5"
    hash9       = "67b377e6cea0e8a69a18b51ce4877437db84677b6f5487be31959f0474e6e444"
    hash10      = "ce62b7170b57d801e2724b61c49589f15e2579c1cc43cc9b6c081979edeb073e"
    hash11      = "e5ed68b4bcaf9863af345c78bbce4bd21d33485aaecd078d91df68fbe05524c3"
    hash12      = "512df08830541dff536d0ebbda7fe6bcab6b5243d0b5c7a2a8b35ce4ff991c4d"
    hash13      = "02d08d7d93af3df0fc3dfd711849d2e9a06bf17841edc4d972d598ada32dba03"
    hash14      = "c0c498bdb7a0427325f8897e510bc77287d95026ebe1934509ccb62911b9aed1"
    hash15      = "03593c64882a372376d9cb6ba632c290e11204b0b2fcb644f09b07010409bf05"
    hash16      = "10a6ac2750fcc0d5d3295a8b984cace4c73d3df0bd1d277a692d7c92dc2a8423"
    hash17      = "72906729fe828b7b43b2ad7b0538c495c58e24fdcc727459958eb737ef51b571"
    hash18      = "63612c9b3064a53c3cfa28ed55820b1128a096ff300f1c226f7dd314ab4afc06"
    hash19      = "4b9ab3ddef285f6e25fd5f8ac2d7013677be61a9df7374c96f1b53c32aff5010"
    hash20      = "ce337d115be1c4bf055a3ed139b54fce9040885ebfcc88cc696cf34abb6b88dd"
    hash21      = "cced2d0d624f3c70c60667f6c887b92873f3aa27fc6b9176beca7de986c6a109"
    hash22      = "9f7aff91af01f96521f6009dac28d7c8301fafcd490fc51442c4265f3ceaa98b"
    hash23      = "c198d557917ff816c2a883c035ad2a992dbd75987ef236a89bbc3a638cd156e9"
    hash24      = "a42b73dd3e39f53600cf73a11fe3a11c08268000037ff6320a995c208d174ddf"
    hash25      = "e6e94fe9f727e2c962ad5386bc32e42ca4128cb64c395103570935e2842f93a8"
    hash26      = "f792f8b8f32e493e2dd57f96a96738f566acf7d9c3d019a956892393dd3f250a"
    hash27      = "a6808a4b250b6dc9010395e1fe0f335feafe6caedff7abf91cced9218900c73f"
    hash28      = "adbd9aaffa7986867722e4fa019acd8a24a406ef0e2cfa8d1b74bc51c4d4957d"
    hash29      = "7bd364a2ab04e10216215117f1475a423e47d235fdd7f7ebbf931d8a5856c659"
    hash30      = "86474466f6c80dda5c1000b9af771d4839ea799a4eb9810291baf28c743d0857"
    hash31      = "bb64c9e36c3ca488be481e643b5ceda32758c6fb62fdfbcd6498300dc8367ff9"
    hash32      = "f5621aacb3c7166cb12603f1fd0f76bf80515f16952b1251cecf5cc8b1ffe268"
    hash33      = "34efce229df2865d7a6e3a065525afa24340aacfda332e3854354d38851b4911"
    hash34      = "e4166839d93bef7a2186581d0582f78b27dec660e553ee995984fb45a088bc24"
    hash35      = "592e793458e74b0a33074c523cb9db5699c6843406e7f3b131e539d48fb704cf"
    hash36      = "d733f4c36e94218d0c867216f47436d261a9cb12da1bea5ba19043f56e772079"
    hash37      = "71dbff6cf8ee5c85678377f9fe2ee0a061936f9a7d096e1d4c0cd64eddd2c3ba"
    hash38      = "9590471d6c3584685a411d710fbcfd540ba7e78005b9cec90bdb4db62e5f76e3"
    hash39      = "389797cd759997a63a0fb2dc9863c529127ad556b1cdabdaa4bfd19b93364610"
    hash40      = "9a832fa9a504e25ba2fd1776edb1911c1191b80babcac5441339bce0aa2aa83d"
    hash41      = "28b0de68e178ee35df734b10526ab0122c5689822bdcd8896eb6d5876689cbda"
    hash42      = "efcdedc1f18c147458f510427bee2603586273cc44095e9efb15cfafad8795d1"
    hash43      = "ff945101cd400e407ad9cf62e66cb57b2960a6c659d9aa07bb2f924f18b12fd6"
    hash44      = "30cc7abb2b18649577ee6c46a5d2730e60fbd0b743d869fc4a3f0ab714b96e1a"
    hash45      = "22ac802c82c7d834041717ede444e489527f0a23a6e94241f83bd46d0554f049"
    hash46      = "8e5ae278f52520f7e3650995bb6a60b052822b596f2b2a53004e5746e47cf75a"
    hash47      = "4f9b73982820ad7137c740da524afc4e4f42c556ce4ed5cf1626e597ad499796"
    hash48      = "24f14b09ec4626426842297b70990335268e500907ef863bfbf686ecda91c08c"
    hash49      = "d2e2722b31ead1d314df711d4f21eb43a4cc2735098f7b19d578bc9210328141"
    hash50      = "bef3d5e8fff89cb926712efc1dad8dbe6cc20dc554270971283a09aea2208d47"
    hash51      = "04f1dbd344c8590cd8828a64cb472d5cb3778dfc7ce05023b9fd3ffc552e594a"
    hash52      = "21fe7fee73d9e9f8d40e25b926b1f106bc6635935d182e682a918525c92db521"
    hash53      = "32896ea41074ad9c8f5e0a361176f61e87915871c0871f1be1ca1a9d29825c15"
    hash54      = "2677685a9acf96a11094336021dca8eca725af978aa2b4eb480cea30c49ee3d9"
    hash55      = "71fa97a415f49694fe559973f9af80c12d7927b6bef08c40792bf473d76a2cc9"
    hash56      = "dbaad25b90715ae11f78f8f94db2ebeed15d93a761d4d117af3bcf978bf50aba"
    hash57      = "464925a5566e765c8262aab9715ce7392ae71bec09f8a0fa1fb97b2ee86ee19f"
    hash58      = "a5e2fb827dc9b1b29d575238bdea8665272d9d1febcb957fc39b0741a1231e94"
    hash59      = "21fa7685be3e5a276ae22a29faeb2dd53f47b6df15fd3b2cfe41062c2ee40d32"
    hash60      = "b3ec495666d552643d9e5b63bc2032a9bce074a80e9887a4637e34e86244a25d"
    hash61      = "0b69d523b9d0b01eb88a414085e7428f56a0be9f5b214b6e63a875d767f72812"
    hash62      = "b3c732d9ea3cf6b92c561453e4aac21d7e847ff031dc8aaf5700eb27f37e70e2"
    hash63      = "f2eb3aedcd59269ecc7f02c34623465acd450045312bc90d03d112039cee89c1"
    hash64      = "c15c49b736fda5417cb52f9277ec33de87e67086d0870311e41d64c97c5dccb0"
    hash65      = "08889d12084a8b10c089bc4e56e50300c64fae68eaefddf9f98613b26f8cb472"
    hash66      = "1783522165a69fb4ada64f37cc6a4496f8111f809d11fa4800ccff9e3c2a841d"
    hash67      = "b9f64833aad772a911a448b861a15645bdcc9268742b4072087593aff7d79600"
    hash68      = "d75a9ac81b2d42d3594e4a512236ab419389125114400f6d8134b0ff5eece626"
    hash69      = "759b963409988dec7d5e0f5ecbc9096bce437d62d6e75a9ebd921c7c3627508e"
    hash70      = "9da9d4f31374552cf272573f3c9c2614735c1617a67d5624d892374764b6e46f"
    hash71      = "9d65ea849467946ddb19ede02d264c57a37d27dd36848269f1dad717bc8fa6cc"
    hash72      = "7c651e5262d0f4ba1e72e51980f4673c22f370662ffc260a4bfe5a0363f7a9b4"
    hash73      = "dca16deab4cc421e6cecac56b10e44ea630343fa3b4d0b241e3d3560de43ec4c"
    hash74      = "6b91880d0ece32d9bca7ad7b1e160e89fd1acf3f712e6cc7d899c886ebff13e1"
    hash75      = "44cf659e803f80b99eda81db75071db800e0a053b1e4814684a5d999418fa942"
    hash76      = "df32d9f25a6cd01d86d12097ac001d7fa840599f3b9750f8708e120572e7fe86"
    hash77      = "5ff929e21090fd1dcb707485a313256fe0161e3f1359c7a2ec3bc9d5e7005aaa"
    hash78      = "074b53c1867d46cefc7445d4c781d0302074af9d17b168e837f8cfd3f14ed1f6"
    hash79      = "fe85dac762019b25bd4215d14fbf81eeea63d8eefd2f3cbfce874f5348c771a4"
    hash80      = "7112caa029171d69204767a52e4d3b8ffbd9bcbff5494a1dad92ec48f230c622"
    hash81      = "0ba844086355e4094db427c344aa9387bbadae7fe0fd6e4835908654f9eb1f61"
    hash82      = "06cc6afcc3b13d1d5349f2ed2952ffb53ff286b585ea8e2e81ef6f2d1f51e4f8"
    hash83      = "7cc2fb46902c441225a654e20998045904ff7092e3fb734b08c63272d8d050fb"
    hash84      = "3e9c0be164f66631be44c17d53d82031e0511ebe77feff088b93481886201a96"
    hash85      = "61046aa63544318c3eb03fdbaf9176427d7c719510f879af797888fb6bce4784"
    hash86      = "ffe9573361276f7e190efeef0360693f1bdc2d1b6cd275fe59a00dd4dad21eee"
    hash87      = "59a9eadeffb94f349ba2805744d2ae70802a2ac6bafa5af81a14379d4f166744"
    hash88      = "0862ab78c6e136f88cb63818a77379347936249c848ce8d3c1cb42362b6e66dc"
    hash89      = "24d3b485c0b1d3a85dcb68223bbdfbcb69e7e5afd9a215cacb89fde0e80588b2"
    hash90      = "0f76f3d01f0bba6888f59634f8526b321010dcc86352a4e3cf78136cebecb073"
    hash91      = "cf64ea3f5bf9408dad8bf219f2f03a1db689ad2110a2da9eefcc17af4198f336"
    hash92      = "33bab59ee88fdab690cf0820f5bdc755762739aa086f2039be53d762f9fcc91e"
    hash93      = "c5e92bd5a4b1902082d7a444d7921991c52c3507a983a87d006a2b6216fb31ae"
    hash94      = "56aff314118d83be63538d6d37dcc0dec93d34e2d87217d44c731aa9f2c45256"
    hash95      = "5a81bd1a0fa1b3ae906ee855c8dfb055d70a7137a682c672f2a7845644be7178"
    hash96      = "9fbd30e93ce0833f81723344ebd3d16ed0f10fce5b17144f9da2afaa6669d730"
    hash97      = "71277581223ecbfbd4c5dbb81fbd8be1896100a4f748543e8b9c3e413f9923cb"
    hash98      = "1a59cc88f7194dd0f8df2b7d43d2b4329794e6f78fba4a17f576f4e982137fa5"
    hash99      = "e769db7876c51de2521e3d650dc40bfb6b3f97945ad848986b7e521255151a40"
    hash100     = "b9a800be34ebd9a0f9c1f9020f97ec0fcb3f3b3d2a007b18ec6e142e28d56d13"
    hash101     = "c5ceb29ad9582c1c2ccefd323d19180b686218c22b1079396fd0fe57fc510fbc"
    hash102     = "b28a8ab7709f62f04deaf0633457167f8d2a5f42aeadc92e6f604ebfba7cabb0"
    hash103     = "0b8715766e231a63f73a17dd1b2da9752079787247a7d7ec64f5487fc3ffb15d"
    hash104     = "36498990c478c0f1eb633234dced1d49b36e8bd6fce6d70e39d42f37bbc972e4"
    hash105     = "42884cf130bc544fddc7f13657ba16faedf98a4abd5a2a17199a093fed206049"
    hash106     = "765886f4da0093ccba3b599702af892fcef18493c9c4cda6f2a79da34d63aff8"
    hash107     = "87fb4871a66b461ff0d2c235c1a149d003b547edb718548979b319ec6e315bfa"
    hash108     = "331f4832a52b7f8d862d4a7a186dd5651b38da152f19cb3fb1bce6714c89e5cd"
    hash109     = "9c641393758249fc9e5f2b5da833f832cad1b4ad799992f9b51f58600520d1ba"
    hash110     = "badb2ebd1fa209dddbc0abc263ce2c79be15a8faa081d98198621f8340fcc33d"
    hash111     = "d588ee5a5b08aace573ae266ee0188a35cad32a0dbe566c93d95aa1f7fbfb81f"
    hash112     = "0315220575fe2291174e5c2318b5d827ef69655d3b7c37e82f45dd96eb000991"
    hash113     = "7f0d46814fab6bd7fe594bc72c8c41e68e6efeb1a7583727ed890a03814b0dbd"
    hash114     = "1b33f7e4ba3370753ce7c815ecd9bca48725a72ecab89a79684df23c881e0cfc"
    hash115     = "0f6be4526d3063e6aa5357775daf64a0b11720a0ab3da893bc5a69e1e20ad045"
    hash116     = "113bd7c57441580b57003dda0d21bab52ae527f661efd240240858ebab6e9e2e"
    hash117     = "e5692ea541ab4e892093be9f153f94c11e7278d303ab4bf0ab6ab25584d2a618"
    hash118     = "6312421a8600128055f4bab8bd6236a9a8b2ed13b1418e9e19e05d49d869be45"
    hash119     = "14ea14aed84e1259786f7b22435d393b64d0375c04599ca49801ebfa5940e069"
    hash120     = "8236ffce20bd4e1227c9c94f4fc28e8d8ed2d4b3039c0b6238ccdd134fcb4b6e"
    hash121     = "a07a708650be0bea8933c0dc5d1f4feaa690dde0df9d6cb4734ab89ecee395c9"
    hash122     = "e0d33e5313412d367e3539caaaa740d8c8814b9fddd55786b447147f9028935b"
    hash123     = "ce81424edab3a2e2e5acd2a427d56569cadb11d1486757c375689b0cae01efd5"
    hash124     = "b626463542831aea74e79e26bd6b4a086ae9f7e0affdcca002121f7f6929e2f8"
    hash125     = "9d86f720bfdaf6d5c2323ba45aeb05b0a40e43628df118765b6f7cbd847d6058"
    hash126     = "3aa391c018733f4da40141336dbc9a8fbf22e2ca884bfef5eda52dbec4f10103"
    hash127     = "40389e731bb1dd97d988c5a13f2937ebcf56005e507d6e341d8e88c41a8cd130"
    hash128     = "5e5d1f301137fed6c7c1b92399f05704a505d2be66b8fe8ea29fbf46e8f9641b"
    hash129     = "0e1a5ba0bba19d5d048c464cfc61760c65c5fd51e3465ef46834eccfffc275f5"
    hash130     = "97bf7739e95873111a142c1f47a5030a8607641544f796a3eb26fb0de5acd998"
    hash131     = "c0580984d243716bf849a810c67757b4bfea4c18788c27e7d38ab221f7700515"
    hash132     = "344045c5612d8fce8ebd9d6512938a29b55331424a138f25a676b2628d772c24"
    hash133     = "7bd4634a83cac3923cb7bfb5830b4626a65327dd4eb2686777edeab812bb7c37"
    hash134     = "29332a5ada90e73fb57214b384362866c395b0ae7d53f27e3e6a3fa35562d09a"
    hash135     = "56dedcd1335a099db4580bf76a818517868ff1675f543387a64f21593989060c"
    hash136     = "a87f6048012f4596c75f808b45731631c4da8bbf93b97e7df9ad18f206b846c5"
    hash137     = "322710825f7ca65f04e84ce69b6caa4243e2770f2c60ae5b20f40ec8912b2a1a"
    hash138     = "d351bb338af337184d364f125ab44d920a8ebc11c3e5a076ddbc638cd3a58da7"
    hash139     = "692510c4b47d587acb87624a6a8e72a5259b9dde33e05facf1b70be9f926a4ca"
    hash140     = "014d73f909a2ad72a79992217faf2d32af6a9e96ade1911ce6d57ff7c3b0daa3"
    hash141     = "f2896e2dedef505fa475a7bfbd538c58b66384cfe1a15c278c0f191b8a70c311"
    hash142     = "39ce6ae7a2fe5bdc688872c807e28e30601e95d024f5b076bc73a073a7503547"
    hash143     = "06e8bd83380cb153f5b2a49e139995f2cdbcb6bbdcc3976ebcfd573783333d7e"
    hash144     = "3082c1de30a95a8a09e21c578d1ef2a2b8644395d5e0b3f9d16a0e9009369dd1"
    hash145     = "1035c382d98b0e0d6685787fa066112d4d4e40d1b8d27133192eb2a3eb2e6ebc"
    hash146     = "843f82cc6fc642dd5aac9627c551b80974d330c2cc312930be7a8cd88d0cb735"
    hash147     = "666fbbde7f9ac63575a119b5e1a3404f14c626e401a453e8d0aca13443f009b3"
    hash148     = "81b2968ac803807cece9ed6b7ee3ce32ed2900134e4ab7ec3bf79ce3b7f1f8f5"
    hash149     = "98d32729430ad0c4f5a46de37cf136e52a528b07355dc44cf94ac338410a4238"
    hash150     = "2fc6c31aba01341d1fa2e01feb53e50305ae8747bd11b1c76e531f8f12a9a125"
    hash151     = "fbbc056db03b625090c0201cd42a754e23798234dcaef34ae30e6d59bf87fbb6"
    hash152     = "9d3b5d5e6872e3f81cf6efa4aca2bc242d9a744b17b6fb5db71a0a16efb4636d"
    hash153     = "a2cf31dbb726618d720aef196bd7b03f5fc0cce5bd11cf030f784ba7f6a0fde4"
    hash154     = "0c071610a8f6ef17117c05f47ae1d3788dba7384d884138996db6ba508c1d351"
    hash155     = "c68a17eda74100e40768d9de3469c34f6ef84e445f270cfbef1514482b93c14d"
    hash156     = "a92950e494b4859b0daf4bf17d482490c1390d8fee96d86ac2f7db3201f8d14f"
    hash157     = "5b3153796327825aceadd46fe9ee3d90a6c6120bd8af0173999aeb1b9dd0a997"
    hash158     = "02259546a68a8c309faeb30c159b217feb9fd5528918db7455ea292f6e48a2f8"
    hash159     = "4ea598be2f6a133671b41a34b2297de060048662db153646d67f9da1bac001af"
    hash160     = "1eac9814e3bc9d9605e7153fa509b246b5e42cab67008593fd81de4a350b6c8f"
    hash161     = "d46f1f3e78661458cb8cc23bac20b3dd964bafb317e6470c3b2432f9dd82f963"
    hash162     = "d130efae96166588266beacee2787766ed89fa296b50f1ccf7e999d3f8c9849c"
    hash163     = "b730d24203a1728c8272b1a9634d2a7dd88eb750839ca39d2c9a5bfbe7adf306"
    hash164     = "8c391ca5963e2545abb5e01424c2534cb5ba042ded379d57ee2938d283dc9150"
    hash165     = "8b96df172385f0cf3bdf0d149ee49e7158c9be04ff29fb348886450e6cbd4ad5"
    hash166     = "3e75f6787c1ecfa8ba249837fbbde43bb44f7810efb2e0f0a68ed26cd07b132f"
    hash167     = "2476fa674c9e0299a2057ba0833af9dfa9457b49a2c07d8331a55689a06c85bb"
    hash168     = "b669095224fcdee7bd0cb6955a9d81c263d7caf7c8bb6ad383f5ee6ab43515fa"
    hash169     = "7ad1ae978a927081d7a79a1266e4776f63430445b47db3a3224c0e08af153290"
    hash170     = "378c69b8d07bae461491e24032474837ac022838ae0ce87456c028d27761d0c3"
    hash171     = "86991f39e98a3881a44449b3bab15bd0ce8e25625155fe5d2b54f5fa7f672976"
    hash172     = "b2e6452bff98ab34cc4f52346ef7524c0f048eb1106c02599d843a40ad8ae4e3"
    hash173     = "1f451d12ae21dad5ce13415aefa938973ecf8ca777ea6c9acad65c9c6f0d70fe"
    hash174     = "166cbee42200771473a77a30c56a801b884eb6395f1746d8173748d7fa38182a"
    hash175     = "19a0ab9b9aa73ac6f774f7ef1aa40219d69bc31e57b944bec26c67f19bef0416"
    hash176     = "89a525df512f016b80e58c5e05d87f52f7931de8850ff9b285b681b9c2cd1125"
    hash177     = "d0aa155aa9c56c0e3d3b9c0fa969caef8527e42a8715022304f15cfc0211b4a9"
    hash178     = "16f7d1336908104c03613476e9b7ae67458162d9586305ff1562e00af3fea231"
    hash179     = "89ef0ff7099386d7b1bef631b83c2b780e4ef8c75f32280644cc08e9ff8e4e53"
    hash180     = "3bc98eb223ef9a8551837e2896e15ae759ed20bb299a5175fbecff3daaf926c0"
    hash181     = "8189ab6195697ea41953ba748b82993b2721268a72158f57a9041298e29de819"
    hash182     = "4727c7db5970b38cf6afc5dd9f682d4350cf20d660c6a212d1bd516e745ec07e"
    hash183     = "25beef677162e07febc06a6d16f3e0bcf1407586e8f8fdde88bd0db5e8fe8371"
    hash184     = "ce3007cd926557a515f91036218aca5dee494006565ae3f316362e4f22471304"
    hash185     = "fc10d18b5619399a4805356777ce8b5afa874e020bc63536a51d962af5849fd1"
    hash186     = "20be2b182d91b9f82edf042395de881c0e295d7bb66c1d14d959968c6107f349"
    hash187     = "c8dd238b8235856f79562efe913dadd0ce1d6756b0c0c93b7d44474662ccaf76"

  strings:
    $s1  = "AmerikanskiyFBq0.setRequestHeader(\"User-Agent\",\"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\");" fullword ascii
    $s2  = "// while (AmerikanskiyFBq0.readystate < 4) WScript[\"Sleep\"](100);" fullword ascii
    $s3  = "String.prototype.AmerikanskiyRz4 = function () {return this.split(\",\").join(\"\");};" fullword ascii
    $s4  = "AmerikanskiyZr6.push(String[\"fromCharCode\"](AmerikanskiyVo1));}" fullword ascii
    $s5  = "{var AmerikanskiyZg6=new Array();" fullword ascii
    $s6  = "function AmerikanskiyAVw7(AmerikanskiyHu5)" fullword ascii
    $s7  = "var AmerikanskiyODi5=new Array();" fullword ascii
    $s8  = "function AmerikanskiyXLq3(AmerikanskiyJWw6)" fullword ascii
    $s9  = "else {AmerikanskiyVo1=AmerikanskiyZg6[AmerikanskiyYw4];}" fullword ascii
    $s10 = "return AmerikanskiyCh5[\"ShortPath\"];" fullword ascii
    $s11 = "function AmerikanskiyWIa6()" fullword ascii
    $s12 = "AmerikanskiyFBq0[\"open\"](\"G,E,T\".AmerikanskiyRz4(), AmerikanskiyAr5[AmerikanskiyPWd6], false);" fullword ascii
    $s13 = "else {var AmerikanskiyYw4=AmerikanskiyTSo7[AmerikanskiyVo1];}" fullword ascii
    $s14 = "function AmerikanskiySv4(AmerikanskiyHu5, AmerikanskiyVKz0)" fullword ascii
    $s15 = "function AmerikanskiyQQj8(AmerikanskiyKVl4)" fullword ascii
    $s16 = "{var AmerikanskiyTSo7=new Array();" fullword ascii
    $s17 = "return AmerikanskiyODi5;}" fullword ascii
    $s18 = "return AmerikanskiyUNq8;}" fullword ascii
    $s19 = "if (AmerikanskiyODi5[0] != 77 || AmerikanskiyODi5[1] != 90) continue;" fullword ascii
    $s20 = "var AmerikanskiyZr6=new Array();var AmerikanskiyUNq8=\"\";var AmerikanskiyYw4; var AmerikanskiyVo1;" fullword ascii

  condition:
    (uint16(0) == 0x7453 and (8 of them)
    ) or (all of them)
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

3825d32e-30cd-45cf-a3ed-0c9003db6d42

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion