_20160516_004580ab527222c2162b3ca28bea3618_20160516_004dde193a5d_651

YARA detection rule by HydraDragonAntivirus · GPL-2.0

datamaliciousorder - from files 20160516_004580ab527222c2162b3ca28bea3618.js, 20160516_004dde193a5d99e098a5ac4db57f1a44.js, 20160516_03362bf1df8e40f9f2bbd783b0dff45b.js, 20160516_037a37e2fb90c12ac64fbd2960a5edfd.js, 20160516_03a73ec8da04a07d2449ec9373ce2b3c.js, 20160516_03c83db0089eed1872262e254c7204ce.js, 20160516_04447a0070ae288e1bfc708cde8a2fc6.js, 20160516_05a806c005512943ed2880f84125f116.js, 20160516_07797d851b406d7193d640baa36afa5d.js, 20160516_0a14b6ab300ed7ab8ca3c9d7357d9672.js, 20160516_0af116ad65f47d7471439b8e4611bf90.js, 20160516_0cb7bf934c7d08e0a21e12c2a0c22be5.js, 20160516_0d3f8d7cd22640cf5826e1dd56d17145.js, 20160516_0f78d3efd5f66c0261e690179cf9e8ec.js, 20160516_10239e69e7cd66049cb38e7460116272.js, 20160516_1640fd107909d24201bb4d7ceac4d9f4.js, 20160516_180c9cf0e426a12475f6cc0eb7fdf2a8.js, 20160516_182b714f59c6cd180968adf6725db91d.js, 20160516_197716bb775b728ad3018395aca8245e.js, 20160516_1d0c7c3137e7453745b9feead50c1133.js, 20160516_1d559bd1f2e886825d845a8db7e747a3.js, 20160516_1f443f966599f1ba253dad589e63aad9.js, 20160516_2214dd9a2c3184adb9640de4c822705c.js, 20160516_229ce506d05260144feb1e45506043ed.js, 20160516_23a58eedb73a97e262f3f739ea238ad5.js, 20160516_23e78d844e2a71d5932ca5b3628a802c.js, 20160516_23ee11bcd1c5b850e5ec3711d3adc931.js, 20160516_2ba57420096215de402d8b02eeed8c67.js, 20160516_2d0170da7141fb4905b29ee91527f3c0.js, 20160516_2d2ecd8f62559784964fe359132b9883.js, 20160516_2d8f4ff534962bfd2f4ae3b14a225304.js, 20160516_2d9ad79cb90270d35d32b93360ffd0b6.js, 20160516_2e50cae8b285d10d6c779c47fcd0367c.js, 20160516_2f52b142d14ec8ad38160fd1f9634a5a.js, 20160516_2f5ea8151ab21b0d94eb5c497887be6e.js, 20160516_314074c9c62ba7a364bcfecd9bc636b7.js, 20160516_317f91c9c5db0c168766bd786a797779.js, 20160516_32030b2c7144ff5d2d495cb2e5153f02.js, 20160516_329c0598acf2c56cdc6650fc88f846b9.js, 20160516_32de97bdad5dbaff020362fc63647192.js, 20160516_345c86f5d428635a0ea1ae5195680c6b.js, 20160516_346cb56c420fea509ca8da55f5f3a161.js, 20160516_36e6462614302c5877082f0be084f3d5.js, 20160516_3858ad53dc9d93bae8141c5fb277049f.js, 20160516_3a64f83772e964688488309290def547.js, 20160516_3c0994126c15605a7f54159b96fd7ccb.js, 20160516_3d2810c01f3ea20f5df69d33f83c12b3.js, 20160516_3d3ea551b3a1824349abfbe2aa209338.js, 20160516_3f9d5165fdfe9546db322b2e20c4dee3.js, 20160516_4232aa5ad486be4a8d4b5d9efd0329ca.js, 20160516_4573e7571762f8f6d93cea6fff7b9604.js, 20160516_4e36f52596b5881a3593d5a4cff63943.js, 20160516_4efe71c60b9e69a45804114d9818078c.js, 20160516_52c00fc533da3a85b84930262dda5c27.js, 20160516_5317596ff66422981e967d0c358e7b5a.js, 20160516_5419dd90aab60099fb0713afb9ee6651.js, 20160516_555a4daece308d316d1b72d8146d5ebf.js, 20160516_557e7316ed4b2c4f118da607e43aad12.js, 20160516_57591029e483d2555d69f97231b7b7f2.js, 20160516_5ad0777bd8845da6b70bb7d0484fe17a.js, 20160516_5c7631170c885eac753a8b178a7720fe.js, 20160516_5d9dda4cc2ebc744b854d2b35dbcd0c5.js, 20160516_5ef7619bd807a0b0e1ce00abf0d1a3c5.js, 20160516_5f706a9cbdfb31924599c72008e1f44e.js, 20160516_5fe356551c9dee761f42e29604ea871a.js, 20160516_604f758fddadc5a167e6b2076e9c6b37.js, 20160516_6312a51d2d57f6f2871f49db8b3f82e5.js, 20160516_63d0ac8a4da7a4b72294833bbba18670.js, 20160516_6471c08e95453c069d7bd689c1a842d0.js, 20160516_64771642223bd6ccd6d1bb8bdada69c0.js, 20160516_683de1e633eaa3c200d508100f473a76.js, 20160516_697eab4c86aeccaf4769743d3b8bd206.js, 20160516_699e141f4a2c4d8e2341a1bfce6346ad.js, 20160516_6c5870ae86cd1dbacb88aa293de4a21e.js, 20160516_72d949eb4d34fa158254543e117e736d.js, 20160516_74206bc09a5ddb7fc68a9dae7b65a729.js, 20160516_742dc4de751772ff04bec1a36f79cde7.js, 20160516_753192aabd2f8b5467111ba77f751e0f.js, 20160516_75fdc80b2c1554aa07e8e2abbc2cf71e.js, 20160516_781fd85c1f3a9d3694aa06d9a5dfcb00.js, 20160516_78df5e154fd1f84102dc033d3c9ff271.js, 20160516_79e8120b99d9ae5474930dc8d38a3d31.js, 20160516_7d2affe6751ebe048cd87a07f1c79ce6.js, 20160516_7de222413d287dd1767394d037b827d9.js, 20160516_7df85568e3c0bcc607374fb1b00e31bc.js, 20160516_7eca96d4c32eae4cd355d16266ca4920.js, 20160516_7ee7995037ea482250a6bdaf04d774c2.js, 20160516_80ebb38d8378c7f07db1989328cebc2f.js, 20160516_8291d0c7929e9f667a31134147b39d31.js, 20160516_82c23ab45fc4717eaf8962b0eb5581ae.js, 20160516_853237fae31b1eeefb65f0ee177e2792.js, 20160516_8578ad23fbafff09bdd5e94d1103d700.js, 20160516_88b304b08278df81e31610771233d41e.js, 20160516_88ef8a461af76c8db871bfe40b69ba0c.js, 20160516_89583a530413bcc5345d2564d3cdbb41.js, 20160516_8982b6faacc5762e6bb0b9eaeab2629e.js, 20160516_898b8de20d48a7917e777f6fecff8184.js, 20160516_89d207043a4f05a682a9034b201fd6f0.js, 20160516_8daddc40ce3491df06efd77d99223ed4.js, 20160516_90110b759e954fc245567922ffa5fb62.js, 20160516_90f818acbc5dda8c0ad4ef61c29ba679.js, 20160516_9135d6382aca86c047edea62d7c40f94.js, 20160516_93f6ca8ca8e1d30627041f706688dd3b.js, 20160516_963cf44beb351c519a54b1863a506d0f.js, 20160516_9731bda99dc3226674cc49120220b4ca.js, 20160516_973406d0df03ee0c5962ce9b06fdb1d2.js, 20160516_986d3430ef3f4dbfcce95a9d1bb11887.js, 20160516_9a93d5e5324b06e893885bc39767dda6.js, 20160516_9bd45ca1272e605023bceaa2b9eaca98.js, 20160516_9c5d18cf7937bd0fc937a08a98ed33d8.js, 20160516_9cbb677bbb7dca760fc722b84c514eba.js, 20160516_9cd4ba0694ecc3184869a7602e5c676e.js, 20160516_9ce65105578f4b995db83ce4d8ed5e7a.js, 20160516_9cf687534eab21cfc3240bc41abc7dd7.js, 20160516_9e33cba074457c92170252cd751b128b.js, 20160516_9f179319cf6fa97a038096c1aba96403.js, 20160516_a0131e578e7945093775db89311615b8.js, 20160516_a049560b410387c42b1efec3b5357c7b.js, 20160516_a0b15b1caf483e155f490c717e826f0a.js, 20160516_a11cb5c40af3f169b66636eaf7eebdb0.js, 20160516_a328906a3bf97bd38f2db07fd075852e.js, 20160516_a4bbe2eae9b8ce4ebffa6b233ff86412.js, 20160516_a64825c14cc08b736cbb5e64e42fcb08.js, 20160516_a69d5f13efd2a6a4d235e13cebf04661.js, 20160516_a7912addafad3abcdfde87421ef3892f.js, 20160516_a8cf08fe8ce2ff7fd168235fb60919ae.js, 20160516_a938c3f5fb8127bf887c3ec8c3edb947.js, 20160516_ab81f6cf09b3e05ffbd229a1a370aba1.js, 20160516_abc1abf17a5d061a0c04f6ce027ca55c.js, 20160516_ad2e931e83614e8ec8f4a4513a3ea2d0.js, 20160516_adbb376ec753cdabd597ec1f1c9e35cc.js, 20160516_aed63a55656e9711d8aacb7736d41bfd.js, 20160516_b1940e1c14b3eb6514147237b705d345.js, 20160516_b1ac48d5b6cc2d483178b755f4cfc1b9.js, 20160516_b2316b61669832c1d877ebd37b58def9.js, 20160516_b5b5448975158784d355bbeee81445d7.js, 20160516_b5c0ef33774275d4e27ece805b4ef268.js, 20160516_bb2d06dabbebe515d3e4f9c859856137.js, 20160516_bc515b858c8b68bc7de713497eba59f0.js, 20160516_bfb876c1d2452f937b62a7ad2d6c0b77.js, 20160516_c05d164e4cce47efe692f9d53addd28f.js, 20160516_c1452e413d3a4658a0f6077e99323a9b.js, 20160516_c1a37c15d3ed86b077516df89b5406ee.js, 20160516_c1d6d820c59e9210909ac99c90e842ab.js, 20160516_c3471c52d0da605e094ac1e18f7bf4a6.js, 20160516_c410e4e45f8e7f782c67d8f7e2cbd3ca.js, 20160516_c62523c9cef37fcebab7c9827d2c2db4.js, 20160516_c68b5659b68b3d377a210b37de663072.js, 20160516_c715b4ee0e09aa942982a9a7f74cde18.js, 20160516_d0c78fdb5797b7b870824e3817c1b2a5.js, 20160516_d13e1db5f4c2e8d31c78bf36b139c9ed.js, 20160516_d15f8fb8bdf1279bcd7125fc01674d11.js, 20160516_d1aa4b400fe1f311a2703499b5552de6.js, 20160516_d51701e2a4e73fca3185766f22e8e229.js, 20160516_d585b4888dd909491b65d6158eea8f77.js,...

rule _20160516_004580ab527222c2162b3ca28bea3618_20160516_004dde193a5d_651 {
  meta:
    description = "datamaliciousorder - from files 20160516_004580ab527222c2162b3ca28bea3618.js, 20160516_004dde193a5d99e098a5ac4db57f1a44.js, 20160516_03362bf1df8e40f9f2bbd783b0dff45b.js, 20160516_037a37e2fb90c12ac64fbd2960a5edfd.js, 20160516_03a73ec8da04a07d2449ec9373ce2b3c.js, 20160516_03c83db0089eed1872262e254c7204ce.js, 20160516_04447a0070ae288e1bfc708cde8a2fc6.js, 20160516_05a806c005512943ed2880f84125f116.js, 20160516_07797d851b406d7193d640baa36afa5d.js, 20160516_0a14b6ab300ed7ab8ca3c9d7357d9672.js, 20160516_0af116ad65f47d7471439b8e4611bf90.js, 20160516_0cb7bf934c7d08e0a21e12c2a0c22be5.js, 20160516_0d3f8d7cd22640cf5826e1dd56d17145.js, 20160516_0f78d3efd5f66c0261e690179cf9e8ec.js, 20160516_10239e69e7cd66049cb38e7460116272.js, 20160516_1640fd107909d24201bb4d7ceac4d9f4.js, 20160516_180c9cf0e426a12475f6cc0eb7fdf2a8.js, 20160516_182b714f59c6cd180968adf6725db91d.js, 20160516_197716bb775b728ad3018395aca8245e.js, 20160516_1d0c7c3137e7453745b9feead50c1133.js, 20160516_1d559bd1f2e886825d845a8db7e747a3.js, 20160516_1f443f966599f1ba253dad589e63aad9.js, 20160516_2214dd9a2c3184adb9640de4c822705c.js, 20160516_229ce506d05260144feb1e45506043ed.js, 20160516_23a58eedb73a97e262f3f739ea238ad5.js, 20160516_23e78d844e2a71d5932ca5b3628a802c.js, 20160516_23ee11bcd1c5b850e5ec3711d3adc931.js, 20160516_2ba57420096215de402d8b02eeed8c67.js, 20160516_2d0170da7141fb4905b29ee91527f3c0.js, 20160516_2d2ecd8f62559784964fe359132b9883.js, 20160516_2d8f4ff534962bfd2f4ae3b14a225304.js, 20160516_2d9ad79cb90270d35d32b93360ffd0b6.js, 20160516_2e50cae8b285d10d6c779c47fcd0367c.js, 20160516_2f52b142d14ec8ad38160fd1f9634a5a.js, 20160516_2f5ea8151ab21b0d94eb5c497887be6e.js, 20160516_314074c9c62ba7a364bcfecd9bc636b7.js, 20160516_317f91c9c5db0c168766bd786a797779.js, 20160516_32030b2c7144ff5d2d495cb2e5153f02.js, 20160516_329c0598acf2c56cdc6650fc88f846b9.js, 20160516_32de97bdad5dbaff020362fc63647192.js, 20160516_345c86f5d428635a0ea1ae5195680c6b.js, 20160516_346cb56c420fea509ca8da55f5f3a161.js, 20160516_36e6462614302c5877082f0be084f3d5.js, 20160516_3858ad53dc9d93bae8141c5fb277049f.js, 20160516_3a64f83772e964688488309290def547.js, 20160516_3c0994126c15605a7f54159b96fd7ccb.js, 20160516_3d2810c01f3ea20f5df69d33f83c12b3.js, 20160516_3d3ea551b3a1824349abfbe2aa209338.js, 20160516_3f9d5165fdfe9546db322b2e20c4dee3.js, 20160516_4232aa5ad486be4a8d4b5d9efd0329ca.js, 20160516_4573e7571762f8f6d93cea6fff7b9604.js, 20160516_4e36f52596b5881a3593d5a4cff63943.js, 20160516_4efe71c60b9e69a45804114d9818078c.js, 20160516_52c00fc533da3a85b84930262dda5c27.js, 20160516_5317596ff66422981e967d0c358e7b5a.js, 20160516_5419dd90aab60099fb0713afb9ee6651.js, 20160516_555a4daece308d316d1b72d8146d5ebf.js, 20160516_557e7316ed4b2c4f118da607e43aad12.js, 20160516_57591029e483d2555d69f97231b7b7f2.js, 20160516_5ad0777bd8845da6b70bb7d0484fe17a.js, 20160516_5c7631170c885eac753a8b178a7720fe.js, 20160516_5d9dda4cc2ebc744b854d2b35dbcd0c5.js, 20160516_5ef7619bd807a0b0e1ce00abf0d1a3c5.js, 20160516_5f706a9cbdfb31924599c72008e1f44e.js, 20160516_5fe356551c9dee761f42e29604ea871a.js, 20160516_604f758fddadc5a167e6b2076e9c6b37.js, 20160516_6312a51d2d57f6f2871f49db8b3f82e5.js, 20160516_63d0ac8a4da7a4b72294833bbba18670.js, 20160516_6471c08e95453c069d7bd689c1a842d0.js, 20160516_64771642223bd6ccd6d1bb8bdada69c0.js, 20160516_683de1e633eaa3c200d508100f473a76.js, 20160516_697eab4c86aeccaf4769743d3b8bd206.js, 20160516_699e141f4a2c4d8e2341a1bfce6346ad.js, 20160516_6c5870ae86cd1dbacb88aa293de4a21e.js, 20160516_72d949eb4d34fa158254543e117e736d.js, 20160516_74206bc09a5ddb7fc68a9dae7b65a729.js, 20160516_742dc4de751772ff04bec1a36f79cde7.js, 20160516_753192aabd2f8b5467111ba77f751e0f.js, 20160516_75fdc80b2c1554aa07e8e2abbc2cf71e.js, 20160516_781fd85c1f3a9d3694aa06d9a5dfcb00.js, 20160516_78df5e154fd1f84102dc033d3c9ff271.js, 20160516_79e8120b99d9ae5474930dc8d38a3d31.js, 20160516_7d2affe6751ebe048cd87a07f1c79ce6.js, 20160516_7de222413d287dd1767394d037b827d9.js, 20160516_7df85568e3c0bcc607374fb1b00e31bc.js, 20160516_7eca96d4c32eae4cd355d16266ca4920.js, 20160516_7ee7995037ea482250a6bdaf04d774c2.js, 20160516_80ebb38d8378c7f07db1989328cebc2f.js, 20160516_8291d0c7929e9f667a31134147b39d31.js, 20160516_82c23ab45fc4717eaf8962b0eb5581ae.js, 20160516_853237fae31b1eeefb65f0ee177e2792.js, 20160516_8578ad23fbafff09bdd5e94d1103d700.js, 20160516_88b304b08278df81e31610771233d41e.js, 20160516_88ef8a461af76c8db871bfe40b69ba0c.js, 20160516_89583a530413bcc5345d2564d3cdbb41.js, 20160516_8982b6faacc5762e6bb0b9eaeab2629e.js, 20160516_898b8de20d48a7917e777f6fecff8184.js, 20160516_89d207043a4f05a682a9034b201fd6f0.js, 20160516_8daddc40ce3491df06efd77d99223ed4.js, 20160516_90110b759e954fc245567922ffa5fb62.js, 20160516_90f818acbc5dda8c0ad4ef61c29ba679.js, 20160516_9135d6382aca86c047edea62d7c40f94.js, 20160516_93f6ca8ca8e1d30627041f706688dd3b.js, 20160516_963cf44beb351c519a54b1863a506d0f.js, 20160516_9731bda99dc3226674cc49120220b4ca.js, 20160516_973406d0df03ee0c5962ce9b06fdb1d2.js, 20160516_986d3430ef3f4dbfcce95a9d1bb11887.js, 20160516_9a93d5e5324b06e893885bc39767dda6.js, 20160516_9bd45ca1272e605023bceaa2b9eaca98.js, 20160516_9c5d18cf7937bd0fc937a08a98ed33d8.js, 20160516_9cbb677bbb7dca760fc722b84c514eba.js, 20160516_9cd4ba0694ecc3184869a7602e5c676e.js, 20160516_9ce65105578f4b995db83ce4d8ed5e7a.js, 20160516_9cf687534eab21cfc3240bc41abc7dd7.js, 20160516_9e33cba074457c92170252cd751b128b.js, 20160516_9f179319cf6fa97a038096c1aba96403.js, 20160516_a0131e578e7945093775db89311615b8.js, 20160516_a049560b410387c42b1efec3b5357c7b.js, 20160516_a0b15b1caf483e155f490c717e826f0a.js, 20160516_a11cb5c40af3f169b66636eaf7eebdb0.js, 20160516_a328906a3bf97bd38f2db07fd075852e.js, 20160516_a4bbe2eae9b8ce4ebffa6b233ff86412.js, 20160516_a64825c14cc08b736cbb5e64e42fcb08.js, 20160516_a69d5f13efd2a6a4d235e13cebf04661.js, 20160516_a7912addafad3abcdfde87421ef3892f.js, 20160516_a8cf08fe8ce2ff7fd168235fb60919ae.js, 20160516_a938c3f5fb8127bf887c3ec8c3edb947.js, 20160516_ab81f6cf09b3e05ffbd229a1a370aba1.js, 20160516_abc1abf17a5d061a0c04f6ce027ca55c.js, 20160516_ad2e931e83614e8ec8f4a4513a3ea2d0.js, 20160516_adbb376ec753cdabd597ec1f1c9e35cc.js, 20160516_aed63a55656e9711d8aacb7736d41bfd.js, 20160516_b1940e1c14b3eb6514147237b705d345.js, 20160516_b1ac48d5b6cc2d483178b755f4cfc1b9.js, 20160516_b2316b61669832c1d877ebd37b58def9.js, 20160516_b5b5448975158784d355bbeee81445d7.js, 20160516_b5c0ef33774275d4e27ece805b4ef268.js, 20160516_bb2d06dabbebe515d3e4f9c859856137.js, 20160516_bc515b858c8b68bc7de713497eba59f0.js, 20160516_bfb876c1d2452f937b62a7ad2d6c0b77.js, 20160516_c05d164e4cce47efe692f9d53addd28f.js, 20160516_c1452e413d3a4658a0f6077e99323a9b.js, 20160516_c1a37c15d3ed86b077516df89b5406ee.js, 20160516_c1d6d820c59e9210909ac99c90e842ab.js, 20160516_c3471c52d0da605e094ac1e18f7bf4a6.js, 20160516_c410e4e45f8e7f782c67d8f7e2cbd3ca.js, 20160516_c62523c9cef37fcebab7c9827d2c2db4.js, 20160516_c68b5659b68b3d377a210b37de663072.js, 20160516_c715b4ee0e09aa942982a9a7f74cde18.js, 20160516_d0c78fdb5797b7b870824e3817c1b2a5.js, 20160516_d13e1db5f4c2e8d31c78bf36b139c9ed.js, 20160516_d15f8fb8bdf1279bcd7125fc01674d11.js, 20160516_d1aa4b400fe1f311a2703499b5552de6.js, 20160516_d51701e2a4e73fca3185766f22e8e229.js, 20160516_d585b4888dd909491b65d6158eea8f77.js,..."
    author      = "HydraDragonAntivirus"
    reference   = "https://github.com/HydraDragonAntivirus"
    date        = "2026-04-26"
    hash1       = "dd88a75ab317ae39d5cb174c8db57dc42bde59601df0dd3919d2992d660902ba"
    hash2       = "269d25729fe6eb945ec3cf044668b3318d73bacb034106ec8460a8a1a9dc2b13"
    hash3       = "7f8dd8f0ed790f36d147704e6b72411da44dd73e29ef77e2539afe2c3818c4ec"
    hash4       = "961272e1d0edb719d8d25b3ca46a747e05ee711c44c39b73a1edbed3ff74c98c"
    hash5       = "a90fa66d5a2104006c0b119ac41cbebac783fd4cb5c46e8c46b7cdce130bfd07"
    hash6       = "b9f86acd4ab25d0f485daf36a8ca8b75542b976209565a3f21f6b72702174a5c"
    hash7       = "7ab90e0c89bb356c9fd9f38119cac7513e0740f10ca368a816dfda20aafdcfac"
    hash8       = "ae2d01f26f3810a8927a2ad62a60398264686457a645799cd9d6cab379320c81"
    hash9       = "d8052d6833b4e72e7c4c29ff29b0c9775ceb3d092e8ca4c4e3851c6982e15357"
    hash10      = "a1b81a66177de0f72cc6b3147375e6bac8353bc359f0772d3242d17230295fa1"
    hash11      = "bc70b414707adbf3bc53da32f9c65174c57452d9c318ae787ab36b6e136e5d09"
    hash12      = "9e2e96f98fea3df5cbdef7432680246899a862466c46b0ae929d3944674e63de"
    hash13      = "9d5100b8f7f37155118719a0d9fce207507ea283b4551fc38d38de15ab8ad24e"
    hash14      = "55809c965d327ed91611cb0077545c07e24f38adc8e3b2340d89c12331cf4f8e"
    hash15      = "3d8126ff26bf157c05a2a853c9e6be502c1ff7ef15f0c5ed3c407e8215e170d8"
    hash16      = "4c23afe5ccaef5ce3565de9b27032411072ea5b7278e4dad987ce21863d0e1b3"
    hash17      = "648ae8625f1d421f718154059bc486442425f3caaf14d4197085d59add8433a8"
    hash18      = "a147c47d99750b552f14f9d3b4e225b57a2380f62e4e595ebeab1f25cebee220"
    hash19      = "20feb7c3c8ad10d4f0efaab68e5fa8195a21ddf8fb72fa6565709ddeb1c2dd4d"
    hash20      = "82382449a074b46851c642a6d0faf3cddb9cac010b0ee320161bb1970739d97a"
    hash21      = "8c0399360bcca8bb62959f24899a576e70f9329b545dc0291d620ab8f7c55cd6"
    hash22      = "f694b3ab6ee439a60e43eae706b958656ec3ff8bfe982032a7a889496edc31bb"
    hash23      = "ae3d0410aab039fe17378d53bc95ab84d78141a82f3de8692eea4e27815dba73"
    hash24      = "5c0d18557d60e71332b9ed185c5eaacc7b7fad1181c0afec234c4b7f43b9ea51"
    hash25      = "1b8e818008d51de9e031225450e3b2a84c3977b764420f5691cf38ae89601c43"
    hash26      = "c46d0b5377ee55cf12d49d4864be67c527b434f8722c34dfa6bce06db8864696"
    hash27      = "fabbe67c7394e2c754c811d9c4888fd6fb90432cb0fc70a5e2f348d3892b822d"
    hash28      = "cba5cd247f9e50186232c9cbb51f44e52af2946482c5b1ae692ed3c8569094ad"
    hash29      = "3dd92e043cce5b10b6317758346d5d3a3f2b07f8533ad72d4369ce77421920b8"
    hash30      = "699125cd7b454aef3ade127feed7aeef790f03a8e36f6bb7f0419a2ef2bace26"
    hash31      = "60f4c06d34ab8a921b507ec967727f642945f04bc815d1ed0d9790f6da68ee00"
    hash32      = "9c4b27f990a93a6bf2ffbbbccf9d0616c3888be5a470347c2542f20b662b9439"
    hash33      = "2c436ffcb6cbc8ffb0f8ac3582c48cb34ce0cd5d2181e80af8a4a4ad3ef09ad3"
    hash34      = "dcbcc796099d6a60100cf757332a9cb606af5c9a2d85518b4c5ef27f0385ee30"
    hash35      = "6890d318c80dd6763df6fd94c31030afd8ac0636a7cf17eff3f135d4dce63053"
    hash36      = "93fa47b3ec0d08add6cf7fb2c682ff6179099c5f8cae3b8771715d0d9539c044"
    hash37      = "6f1edb7852656e419489113c21c45b5957b7fe18cc36b2d1305c67dd5d93f51c"
    hash38      = "3d24542b647b0dc06a8613f7f44584f82b7a972b6f29ce44666e8f70b38157db"
    hash39      = "1f264555790141daafc08bc99791befdf46e68d80f30617b6b3b13db53e6def7"
    hash40      = "af789daf7ff6e75e46e4670d4644b0879403633e4e14b8ad961fd8a4ac4429f2"
    hash41      = "580e3cac2b9bacbc7aa15dc90cc26381b1056a0d72534d0ed827f02bf1128abc"
    hash42      = "c900e7c89280cebb0cefd9bc01c2407b2c94fac327b4ceafb0073203e4ec2946"
    hash43      = "5b057d1d09827da026c22d3e6ab9de5a7077471537471e5b49bdd09ce638b3bf"
    hash44      = "2eef9ed38ce36504552847b102887c4d67b13653cf483c6c7b0806206ff32506"
    hash45      = "bfd0d13538e90b21f83cc8ce7f4e1f9bf6a234b973851ac9cc4de5fb5651ee1e"
    hash46      = "ff56840e592393b9cd209f3afc9bd7602244af65c61b4569f23eb9050a485251"
    hash47      = "12bd0aba253b50c3464929e9113150cdd2ef02411b478139a675f31d08a2a84a"
    hash48      = "7bd1fb4f09dc01d92bd887f2939eeb66d36c5011e682022e98f9bac6d5d2d59c"
    hash49      = "5c7f10264795105cb2e5bf280f661b15b60020e9967fc7b2c55437d906d70c4d"
    hash50      = "dbf8142bad31a270b25f40ab6105c7883aaa094bcd6f0d6219c2d43d18fe1fa5"
    hash51      = "dd4edb6251fb0fa26102616ada0eaf265f5adf8f02941cf5729558a9b2457183"
    hash52      = "5bd5574c896c3208bbcb8a341716ab3671f96fa08e51a6f7945631b716a47fa2"
    hash53      = "b3299dd293cfef3a1b86c11029cb5e1b419083974dd34bce640b46d171bc38b0"
    hash54      = "85fca13d3ffc47d78c18f9081820836e648f9cf0d4f5977e2e1d70342082e496"
    hash55      = "3fd6836802a704401ab8dcf3b875d36839ae539aa27cccdefa69d7c0b704ad80"
    hash56      = "d3fe4843ee60803b3a4ddf54e059d1bb084eb82bd0f1cf049190725791fbb5fe"
    hash57      = "85bcdee6bdd679cec0e8020c818c59dfabc6f5e7251e1cbb444139b55b538a54"
    hash58      = "822e19db7bd5c8a8e7a7f85db76c634dadc01ce9b93b7c3cce5a494a61564b93"
    hash59      = "9ee8b124702fb5ea76d2fa2b1eb28654a738623606a177babb20a1bd41a07651"
    hash60      = "05327265a38748b357d9059a8377baa6de9da25a52e41885a87ba913772d5e9f"
    hash61      = "fd5eb8761b1b60129187c4d73a8008095e4f0efb85700f86fbb7dfbfba9a7471"
    hash62      = "37be892524945ba588825d009d759d0bd14c1f5932f8912f0e3f7a7d81f19628"
    hash63      = "d7465bdd68db87ecde8246cd183f028dd458f0d352b5041335e5a5ac1570c6c9"
    hash64      = "ec109fbca83ac4d5871bfe7eb4031db98b7695e6f0026d2cae46aab8ebf140b8"
    hash65      = "ab551c01ea41e039ec7ac260a311d95fc508587d99d0f400f90e068c0b917243"
    hash66      = "9df0a69061208b1505f78e10c75a4e669ebd2cc341baffed87100d8a2034a4a8"
    hash67      = "afdfe33edec39a58f8652a026c275bedb690cd512705e4666ea19860e8c3be08"
    hash68      = "a7d2b1fd8eb714f596f68babde41791794e7c614416295073007558d559af854"
    hash69      = "aa506eeacd4512c55a6c3c18bbff460173b96100d277137382c77dfff96e3266"
    hash70      = "bedd58e34aa2f6c2c7212781d4daf1165caf7305eb2412ad9f5c61b09feb5649"
    hash71      = "9deaf403a10114a1c65b3854d50d74d8c04538ffd40dcc5b1474f1bbda645bfd"
    hash72      = "7c4acbde039dbae0ecafbc577e46e3e1e3ff3532fbfe2d60e4c793f4391666bf"
    hash73      = "4e59b8ead9464feb8b17a09e8f222f475a46c996dba77c7e80c0e9bb420b6277"
    hash74      = "ef2774c40fab9e321f8b592ed7c3b22be617f5f4050f6c23339df603dc13a3d4"
    hash75      = "fe4e43b25693dbc928a4449ef6e2f6be3c91de4282c2adea27dc6508ebf38fa1"
    hash76      = "9f829860024cbab00f01040117597695e79079eb4d9fd6e172556a7450350058"
    hash77      = "3abfeac9138471ca8961c21516f694bb50dcbeb5fd9051c491f6756054fd365a"
    hash78      = "b6fbfb4c4c4044cd65655b4e414c838be623c03c88857296b3d73f8fff442024"
    hash79      = "70afdd2d710bb8db0444c82e190c5079edf4506b8537454ff3fc9619643ed8a4"
    hash80      = "d61194d2bd7be827343cb674cb775aaeb8177db13bb42555839fa62426a2cfbe"
    hash81      = "a28df79d5c375a80a7b8744ea26e8319a11e87cdbb891058ef34ed65609a6ef1"
    hash82      = "42433f2bf9b6168fc710900472af7a308296a1f2e274c68e01c9bb3bb995ee1f"
    hash83      = "310f067e11921e41588b849b6ea26e2fbd390b5251f33ac3180cd011b75a0be4"
    hash84      = "5fb9e6f2c1eb4321c9c57dc61595261932cf7c894de2b9d1d8d814fd6336975c"
    hash85      = "6700507ebc1d12809374f19f0501b1fd9c0b158b02e5c7dbb2062d84639f5c1a"
    hash86      = "a76feada51d3a7cc1c596192bd4bda468666fa23b00f07bb2dc55f76ddf760da"
    hash87      = "682c03ec9899973dc9cbf1ada608456425f8f8f247795f2ae17bb10707ad98e2"
    hash88      = "4144cd8b87e8ff10d1874e7af8a26ad55f9fdaf0856e05ea9d2b67045c61f61e"
    hash89      = "5d6f052cfe0ff1cfe5b2a3cb3cc92f9ac0d69a88d8a3a4cf581189f00d3e618f"
    hash90      = "5a3c0e2af33c4506d89bcbaa04ff7748f400e9d8e69177be0ff81a382bb18e8a"
    hash91      = "6197ee5887a61b7eb5446dbca31c4289063c8d5987a41359a028bbcae5ae8b3f"
    hash92      = "7c99cbc886003d36832160e2ca684b7507faa75184710a6eb08fb246f5c90229"
    hash93      = "a59477963420c4f3c451de2508894a1ecff54b43c0babb47dcfd068fd0235408"
    hash94      = "6ad3e1adb723ec81a0c4962e96cc03bea377390e54a1e4b3de7e453c3e07b424"
    hash95      = "d332e2d60e2711e61df6dd1558fee97b2c76c867c76bc2d544887311f183d3df"
    hash96      = "4456b0c4f22b2a72f90b03ab50e764d0d26736387da6684ebcb2b2930cacec32"
    hash97      = "affc217fc29ba01ff925a79a0e4511477d27046f305670c75697be246e932943"
    hash98      = "16691de441a96f02c20eeb6c24d47d70e4f1ee2332e3311f533e6f6321a6d7ce"
    hash99      = "410f5040d0fd5ff21db3535308bfde889b8a32488a603cd2f5ecf97db59666b3"
    hash100     = "4dd29ad035d9b4fe64691e248089e8dc7328b9ca6245e7c7bdf18c2178c3a995"
    hash101     = "f54ad554a28cc6ca1b2e091307cf81d639a9e7292c4678caae3975adef8db27e"
    hash102     = "04b05e9ee62f298aa395eaa38ca15fd63e20d78f5136aa2f81e6d96d4a8663bd"
    hash103     = "af3693fa13639c6406440c4a23504890349c901492d3bb1d3b22a8a5d0ce9c1e"
    hash104     = "b7c7c1553bb20fd1e16e73812a4d09e12b0c1a73745c54bf15f0367518e9416b"
    hash105     = "55b1a74ef511517ac606b7981a8a241cbacfc0938cbf75bda0914531d0c9cb8b"
    hash106     = "ce96765a2ff41a00a744b2d890cf494c6872a5f3865c7ab308372f11cb71ad37"
    hash107     = "8062df26c65a09d3609f8dd2eb0bd8847c987d31796e9e4571e364ec24ccf056"
    hash108     = "e1a5ad9288af74193ddd21aa3c2686a9b136d8db359f1ebc53ad8650af41b1c7"
    hash109     = "bd30f1034d9cc205b3c13a8845734ab817fa1f15717fbb343223f87136a4b8bb"
    hash110     = "85b54fea0d340d8bc46bb5e76589e978f927797f0db0c0fdffd71426b3242d40"
    hash111     = "9c2a1df420516b00bf12f40f270075b41f56381e4b544ba8f0817ae2cfdc6020"
    hash112     = "8315398d64ab74b09add7d226b20ea3ff84e94d6a774fde8d171b098815577ac"
    hash113     = "22ca53fe30408bca833a6dcd42b249dc4c9fd57263cc0a770ceb49dd94a5f6f5"
    hash114     = "eb5a3e071c5b58423fcfa5441a9749e713f78fcbcc5732a600ecd3ac6453c0ea"
    hash115     = "e56dfb3db63d7c889862c7b228575c41b2967dd814da64b00927c4ee1c9c870d"
    hash116     = "39767ff46690dad51cf7684be9a357f42be0465e507f35d258256c3a352c6a08"
    hash117     = "96f0735b032d316398815023fd88ad7809e2c786044591811079d239e4f0b485"
    hash118     = "be0c5aff29116a83e461e3669136caf88b68cc64c6179ac9dcf44a9448b94fe4"
    hash119     = "e114be5350cef42717f5f28917211b0134c278a766491ce2dfc5d1315d65bfc4"
    hash120     = "f58f03683d74ca59501fca59938fbac1af0a8a569134c09e5ef95850d62326c5"
    hash121     = "d3a2d203fdc71bd35dc0b65efa4a15f9fef7830badff666e35a3cc58a5cbac25"
    hash122     = "277a116a4d8d005dcd70131c701e48bd7d3cd782c708aece077ac9e4abc2bcc9"
    hash123     = "5f6179df5a15c7c3f552816c360c864917ccccbef2d16aeaa007ede2982d9aa2"
    hash124     = "ccd6511a6c7ddc29f5e153536557063d2cb6c89c3a165493827206e659fcd120"
    hash125     = "383a4add0713a51b290c3f879c32fe664a6e85509c44ebf7db5dfb63b98bcb72"
    hash126     = "eeafa2e77361f4c38c2595ecb63caa8f87707c540b738ea2cf57453e74841751"
    hash127     = "41178da29018439dae697491aaf8a00bd9d91995f2df5d38c30b9734a78d4ae9"
    hash128     = "ebccfd1f86630e96c89a2442f8b0a5c1f8efdcec0f84fbc8c0ef78a8a15b67bc"
    hash129     = "5470fe8867813b2d3054248a970c02d774d4717981c721f81abd8662ae33abcb"
    hash130     = "205cb9358480f6ac011737514d5bc21f27093e1e30e7f81e60dda63fbff0ece2"
    hash131     = "a4e7e006abb303260055cb1ff9da864a41c68688be7ce45c5726ab3d12fd3c43"
    hash132     = "c2bf0802ae59210044b89160977b35d3fd99f3737c02f3d91f72ffd49596d6e5"
    hash133     = "752ddbadcbbfb1b20c11481959f1b33732e5d1f69db6d51a598178fcc8744f6f"
    hash134     = "766cb7a147316d69be5162f478a88490ac45e0eec739ba594c2af09d5ca4ec8a"
    hash135     = "9c8012e1ebe88df9a85584fa2a8e30407d58a319e64d2264f076319db492c958"
    hash136     = "657c3008091fa77814d1b054b3028519d7a76e0b6039bd23b0f995d0b2216bb8"
    hash137     = "87847c97fc3fef4fb55cdaa59786bdc46603c54d433dde89159e057935bf6f37"
    hash138     = "40dc9f07b23f1c97c344677e26b0536368c346aa86e27068a18a64ef70918da9"
    hash139     = "4cd3d8dcbefc752458dcfcbbcf5633fdd0aa89538f6a352bd634721f229b4ed7"
    hash140     = "84315b06ec0c5185e9a318c88fc6c81309c6a932d54406601074f5d12ba71418"
    hash141     = "341e546452eb5ec820e3ab53c7fe58cc6e1ce466c11dd93b795e92afde6933c3"
    hash142     = "f36bc157e69ef8ee28683ba40d3477565c05be8ac2948ff94a978133ea9fd2ce"
    hash143     = "8abf01702b1b07bc539128673c8cb55577b44b9f68c1043ed461c9d2c02370a9"
    hash144     = "a1d38cdf06bb3d087dcca05fc4c96b983f8cb50087379f4b4a32b9b582495529"
    hash145     = "0fe0b384d29d473df31ea32dab160d08f1bb890424dc0ffbfc435200160f84e3"
    hash146     = "465d18cef080097282b0f488d6738d4aaaec9ab65a1b5638d89a7cacc46379eb"
    hash147     = "b8b54b0e76c5e09b5f4013b119fdbb6387e778329772423ce305cab9ee67c4b4"
    hash148     = "bc1b24b10fea6db7feb64f0fa853efb93d6797d1f15dffedd1edbade5198d067"
    hash149     = "c815d59d0c6dff7e3fb71232021ea1b057d0c73a28ed983838915e2d7656fbe5"
    hash150     = "f6a7fb975566da824eb08c6caab22ac5fe04d02490976fae8db88ce894073166"
    hash151     = "dc6448b79c09d397ea797a0229644b70dfba56513794757de1b1eb63642b159b"
    hash152     = "e1386cb25213cf460018e62ed6d31813de451566397f9ef313ad80f2851d3fc6"
    hash153     = "097fec2e1b8188e7774c85db3f1e94d8f72fb0dcd1ffa86e1f87b4bd1b3a31f7"
    hash154     = "d2c1792086507969d84661fc1b6951439137768c80e84929d2b22f939e536863"
    hash155     = "edda0f3a02736a45442f95b8c7c559c91dd8ca446b2d385a579855397fbcc7fc"
    hash156     = "2887733ddc26dd79bd1f2abb5297a0e4a10b7a1d83b269f9b7d757d3d56a7b64"
    hash157     = "f5054704649945d488b59671d69eada7ebf48cd7314887bee6db0ffedbfbcc71"
    hash158     = "8aee07f52c812e456cb4c29de54822ff023d0c5a08c2dc596dafdd641bf7feb3"
    hash159     = "23902b129e9cf2ea793dfe5e1b3e3c0c6ee421db4111dce8b831f179b61d95e5"
    hash160     = "3f24d7d6adeefc8f97d10284db3a8fe32dea16a6809f06c8beaf844a81bbc1da"
    hash161     = "72bfe54abbdbd497fd3a30434a7e918759b397e3498088dad75c5a43b4a09052"
    hash162     = "b5c78643da5c56f4dc1467ca157f6a4ba62fdc14803b722abce50ea130bdea28"
    hash163     = "d1c54d2740f3b530606fd8533f9408d68ab28a893d7c212c1984413b9fe4a0e4"
    hash164     = "aea1465c623c8c6d36a7c8bfe6fa8b7b1a09aba19fda8484c28e088402f5a10c"
    hash165     = "3b775349e7d2768a4c4c007c4ca71e23a572ddd5d16997a58383cd4560c136a6"
    hash166     = "157f8a577394db1ea30d5f4d9441ee916ebec3f03078bec81b308eac33cdaf7e"
    hash167     = "9956136b30b06ea0812b942226046734e201960c289c403bc586ff33fd90b9b0"
    hash168     = "86f8055b6fedeabc8a6c231789e8a9466fbf3096446c5246e6d5fd6213035f49"
    hash169     = "21b0fda4b24d6852282b2228b6c0624154e5a3444c9973818b1826c506b7566d"
    hash170     = "4fcaa44e92b19a179906ca14b169518ff7b96338e3a15b68e3040fc67e64a3f7"
    hash171     = "2af4d3336590cd7906cc8101934f845fa5fd7b45df6143a2d2a787561273b662"
    hash172     = "7ede9e4178db303f436f2dd97d63dd28ec6553079ca6187618bf4c0bed8fc222"
    hash173     = "cc7da33f6cfce39c650fced98ff7b5c2c6a37ef469640956503cb9975c9d9b1e"
    hash174     = "ae898f4c013e11b88a7e3618b670990fec654d7f5df5c79c88b920242b7a1c32"
    hash175     = "7b81352504f658dca17f67479755685e0dc4754ef2b0e613187101702fed20d1"
    hash176     = "967c3bd1c8108b054450d635f79403b3452c5e31b44e74f393b25ca6613a9d37"
    hash177     = "41394fd9c4784506b5ff155b1f0d6a872c45fd674dcdef4c6a789ac692816b44"
    hash178     = "65e917c5b75c5bcc0933c954dcb45674510d4072abbccd60bc2ba0c4bfb25e96"
    hash179     = "ef098967154a6c5ed8139be6192e303c065aae3c63836d1b3f4bf5442e872ee6"
    hash180     = "1af894fc464e2104f393dd0bb252aa42d6cad32bbb29e7e54ebe5e1780c3d2ea"
    hash181     = "28e3903598052a8c9f013b824bddd96153634f237be4cdd8cd6a6c537d43f7ae"
    hash182     = "e9ba204a8942dc7e319a11a9822d76f6b9fe26fc7cf4698c0ac9a28896637df9"
    hash183     = "aaa8515b12cf2f96c5aa46737a099ad0a4516208a01c884ce419ac6d2f10d68f"
    hash184     = "1c5d2ba8c2d9b810d4f1d83ed4a7e477506077e018e85c5aab86a690b3a43b6e"
    hash185     = "7c3b9acd1fdc1a17d2a82aad7418183a53b7b61addd02888fbfdc078a10fdec7"
    hash186     = "a96485c08613a331c3de8e2d209058bcc570b5606bc7d0bd831ae52a3a313d08"
    hash187     = "5e587e55c9a9c28c4ac5e7d0a6d43c8b7d988654a3f13b838d1e45226213596c"
    hash188     = "f4d824b660ee41cd0db7e1a9fab0d3417e9cd5b59a1c4f3a93bab4ee546b11ed"
    hash189     = "e6fcf83cf33f2ab2a82ee5418aa409ad70fc5ff053e958f4895fd18ec6df978a"

  strings:
    $s1  = "devel1[Turkey] = -3320 + 3321;" fullword ascii
    $s2  = "function Scott(requires0){VALIGN1[(\"@sdf3asdf \", \"adfs3.\", \"R\")+ \"u\" + (\"x\", \"n\")](requires0, catchKeyCode, catchKey" ascii
    $s3  = "devel1[Turkey] = 0;" fullword ascii
    $s4  = "function arrCurrentTag(catchKeyCode0) {catchKeyCode0[devel0](VALIGN1[\"E\"+\"xpandEnvir\"+\"o\"+\"nmentStrings\"](\"%T\"+\"E\"+" ascii
    $s5  = "Turkey0 = \"start \"+aaa+\"\\r\\nexit\"" fullword ascii
    $s6  = "function DENMARK(Currency) {var Scott0 = (123, Currency); return Scott0;};" fullword ascii
    $s7  = "if (arrCurrentTag1[\"r\"+\"eadystate\"] < 4) continue;" fullword ascii
    $s8  = "function devel(){return VALIGN0;};" fullword ascii
    $s9  = "var place0 = false;" fullword ascii
    $s10 = "arrCurrentTag1[accinp](Backspace0, Backspace, (true, false));" fullword ascii
    $s11 = "} catch(fromPath0){};};" fullword ascii

  condition:
    (uint16(0) == 0x6176 and (8 of them)
    ) or (all of them)
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

6252948a-f43b-468e-9a2c-4552de891f10

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion