[[ fm.text ]] Click here
sha224_hashed_default_creds_digital_equipment

YARA detection rule by Alaa Jubakhanji@ndaal Gesellschaft fürSicherheit in der Informationstechnik mbH & Co KG · GPL-2.0
Hashed values of default credentials for digital_equipment.
rule sha224_hashed_default_creds_digital_equipment
{
    meta:
        version = "1.0"
        status = "RELEASED"
        sharing = "TLP:WHITE"
        source = "NDAAL GESELLSCHAFT FÜR SICHERHEIT INDER INFORMATIONSTECHNIK MBH & CO KG"
        author = "Alaa Jubakhanji@ndaal Gesellschaft fürSicherheit in der Informationstechnik mbH & Co KG"
        description = "Hashed values of default credentials for digital_equipment."
        category = "INFO"
        info = "SHA224"
        reference = "https://gitlab.com/ndaal_open_source/ndaal_yara_passwords_default/-/tree/main/yara_rules"

strings:
    $a0="ce2790734938a0b72cf497dda91abad0a7cdadc8436c9f64cbab6a41"
    $a1="5fefe4142b6dd05a9cfb83ed3b5833b9c733094f284027aff94b3542"
    $a2="e33f021521d09ed907c106ba9e46a7ff70207db4555f0eaf3b8c5c15"
    $a3="e25388fde8290dc286a6164fa2d97e551b53498dcbf7bc378eb1f178"
    $a4="f287cef4d4cd13b203a0d9e0d9be0b76532f55fb302aeda5e68a99f4"
    $a5="e25388fde8290dc286a6164fa2d97e551b53498dcbf7bc378eb1f178"
    $a6="fe8a765d71b06cb4764c5f3abc4c57719a262e5baa86d4a48100028f"
    $a7="e25388fde8290dc286a6164fa2d97e551b53498dcbf7bc378eb1f178"
    $a8="b422dcfa018ce6f6d2454b956382a957a129abab22e4f2db2953987d"
    $a9="58b2aaa0bfae7acc021b3260e941117b529b2e69de878fd7d45c61a9"
    $a10="e33f021521d09ed907c106ba9e46a7ff70207db4555f0eaf3b8c5c15"
    $a11="58b2aaa0bfae7acc021b3260e941117b529b2e69de878fd7d45c61a9"
    $a12="f287cef4d4cd13b203a0d9e0d9be0b76532f55fb302aeda5e68a99f4"
    $a13="58b2aaa0bfae7acc021b3260e941117b529b2e69de878fd7d45c61a9"
    $a14="fe8a765d71b06cb4764c5f3abc4c57719a262e5baa86d4a48100028f"
    $a15="58b2aaa0bfae7acc021b3260e941117b529b2e69de878fd7d45c61a9"
    $a16="b68e1a14c57ef59f073472bea3240f833a555ac9fcc6550960e49207"
    $a17="6332531eeafc6e0ede272192be898f549950fb32b209d04f0a98306a"
    $a18="b68e1a14c57ef59f073472bea3240f833a555ac9fcc6550960e49207"
    $a19="b51d18b551043c1f145f22dbde6f8531faeaf68c54ed9dd79ce24d17"
    $a20="b422dcfa018ce6f6d2454b956382a957a129abab22e4f2db2953987d"
    $a21="56929c1607626a1edbdaafb9c7f10c247e54fcbb20f1e3260f783011"
    $a22="5a6851094d2e7d249ffcb6ae3b9a24d956dbb0b730617d8b8e4e9a3c"
    $a23="5a6851094d2e7d249ffcb6ae3b9a24d956dbb0b730617d8b8e4e9a3c"
    $a24="d0595aeffb584c90fc210ae3fa49a8c55d271c96fd412051b11322b8"
    $a25="d0595aeffb584c90fc210ae3fa49a8c55d271c96fd412051b11322b8"
    $a26="4cc6070ad209a27be76ddd041415ba3d522ccf836aa6505f6ce7ab99"
    $a27="4cc6070ad209a27be76ddd041415ba3d522ccf836aa6505f6ce7ab99"
    $a28="c1ab944915eece52b83b383d4567f5cb557a46e15b809b0704fa33b9"
    $a29="c1ab944915eece52b83b383d4567f5cb557a46e15b809b0704fa33b9"
    $a30="292c952495a96ac76d7feab6eb6abe21b82402653124e966ea7af58e"
    $a31="292c952495a96ac76d7feab6eb6abe21b82402653124e966ea7af58e"
    $a32="4753c96837a2affb32520972bcc997b927bc931d65bfe9974d39afd4"
    $a33="4753c96837a2affb32520972bcc997b927bc931d65bfe9974d39afd4"
    $a34="6ddc47ca4bfaa62fc8853f8b8361feec125b493381bf1e167cf47b1e"
    $a35="6ddc47ca4bfaa62fc8853f8b8361feec125b493381bf1e167cf47b1e"
    $a36="efebdcfa0647bce5e453421a1137bf62b27baebdd6a3cd6a77226575"
    $a37="efebdcfa0647bce5e453421a1137bf62b27baebdd6a3cd6a77226575"
    $a38="723c77a99d2de3083536c885b0f5e656895b7f33def2c55880367d83"
    $a39="723c77a99d2de3083536c885b0f5e656895b7f33def2c55880367d83"
    $a40="9d8e013e806393e459ad9611697129d6057ac50bef0866cbca09b122"
    $a41="9d8e013e806393e459ad9611697129d6057ac50bef0866cbca09b122"
    $a42="3c6aea4df9c9498cf2c98dabd51dcc1e6fec56e87ea160d074cbb3ed"
    $a43="9d8e013e806393e459ad9611697129d6057ac50bef0866cbca09b122"
    $a44="d6368b5581a4a5f769046062e6cc7229307f2d7ab60036e00a3cf729"
    $a45="d6368b5581a4a5f769046062e6cc7229307f2d7ab60036e00a3cf729"
    $a46="da79ee73928d0b41045809fe692e468aea0f869f025365e6438ad159"
    $a47="d6368b5581a4a5f769046062e6cc7229307f2d7ab60036e00a3cf729"
    $a48="8b1c1c1eae6c650485e77efbc336c5bfb84ffe0b0bea65610b721762"
    $a49="8b1c1c1eae6c650485e77efbc336c5bfb84ffe0b0bea65610b721762"
    $a50="efacad21b0f014676c7a5d06fc787e677f7b02f38dbcfebe0a7bedf4"
    $a51="efacad21b0f014676c7a5d06fc787e677f7b02f38dbcfebe0a7bedf4"
    $a52="f64b39340de4b7fbecd689f17e5a7aeb254297b03cdd49ce7dd2dcc3"
    $a53="e6860d03ce26a5a9881be9eb74d23407b5803523a273e2d42c69c182"
    $a54="e6860d03ce26a5a9881be9eb74d23407b5803523a273e2d42c69c182"
    $a55="e6860d03ce26a5a9881be9eb74d23407b5803523a273e2d42c69c182"
    $a56="37b702e65239563dce4de5524727f4e81f5d57717e444df10bf0c925"
    $a57="e6860d03ce26a5a9881be9eb74d23407b5803523a273e2d42c69c182"
    $a58="917ecca24f3e6ceaf52375d8083381f1f80a21e6e49fbadc40afeb8e"
    $a59="e6860d03ce26a5a9881be9eb74d23407b5803523a273e2d42c69c182"
    $a60="71eeca2425758452218d4e9068e7a78ea30e1941b12006ff9a1174bd"
    $a61="71eeca2425758452218d4e9068e7a78ea30e1941b12006ff9a1174bd"
    $a62="818eb7625481043a14687411e2ca9e17525013d1cdc3a74ef24553c2"
    $a63="818eb7625481043a14687411e2ca9e17525013d1cdc3a74ef24553c2"
    $a64="7f82953906054154427f91a29e5c38f68ecf039d87ff9a22c5ea5645"
    $a65="7f82953906054154427f91a29e5c38f68ecf039d87ff9a22c5ea5645"
    $a66="29e2a390ef5cc9ff41ef64ac4dd04716e79e9a9c64157a4acf3a6046"
    $a67="29e2a390ef5cc9ff41ef64ac4dd04716e79e9a9c64157a4acf3a6046"
    $a68="43f102380ccdac831ae0f4ebdbc9982a4307fc2833232ad344e769a1"
    $a69="43f102380ccdac831ae0f4ebdbc9982a4307fc2833232ad344e769a1"
    $a70="ad6dd7d00ff4d6c12e363ea856d798aedc12c3710f0006e4f9befb8c"
    $a71="ad6dd7d00ff4d6c12e363ea856d798aedc12c3710f0006e4f9befb8c"
    $a72="b5ec9e66dac575adeec906579f6d044508d2cadceeefd8c030cf3ba6"
    $a73="b5ec9e66dac575adeec906579f6d044508d2cadceeefd8c030cf3ba6"
    $a74="e07ab90e0867caf13ae5c1efefcbf5e53fc6da4f17b9d0fb88ca2173"
    $a75="e07ab90e0867caf13ae5c1efefcbf5e53fc6da4f17b9d0fb88ca2173"
    $a76="e33f021521d09ed907c106ba9e46a7ff70207db4555f0eaf3b8c5c15"
    $a77="e33f021521d09ed907c106ba9e46a7ff70207db4555f0eaf3b8c5c15"
    $a78="a2e38201e002b8f349b8998545d7e7524e17bf82604c98ddd80f96f8"
    $a79="a2e38201e002b8f349b8998545d7e7524e17bf82604c98ddd80f96f8"
    $a80="c87978f7032f9774627321e4f288a5754626feebb7d12ec1676e4329"
    $a81="c87978f7032f9774627321e4f288a5754626feebb7d12ec1676e4329"
    $a82="b1bd2681f699de24bc1be97ce2532e9b9684136944f297afffc7c064"
    $a83="b1bd2681f699de24bc1be97ce2532e9b9684136944f297afffc7c064"
    $a84="cc4a2eb4f9089f0018139e937398e281d97a23ed166d596946d7a5f7"
    $a85="cc4a2eb4f9089f0018139e937398e281d97a23ed166d596946d7a5f7"
    $a86="768fcc741dfdabe9feb90cca265c32e88ed681d984cf2d45b17b048c"
    $a87="768fcc741dfdabe9feb90cca265c32e88ed681d984cf2d45b17b048c"
    $a88="795e094a29a4a7e4f733d6bedb87711da6d039a19d6f0224aca0b86e"
    $a89="795e094a29a4a7e4f733d6bedb87711da6d039a19d6f0224aca0b86e"
    $a90="59f7706ee2522fd40d4277cda0845c66659675d5119dfead54cc714d"
    $a91="59f7706ee2522fd40d4277cda0845c66659675d5119dfead54cc714d"
    $a92="ab88a05dabbdd79168edc1d36d7e1f026c7144cb85792701611576f7"
    $a93="ab88a05dabbdd79168edc1d36d7e1f026c7144cb85792701611576f7"
    $a94="8aaa476518cc331f7339d70cf72f543a33f7e1b2952c4f6bf56b71b6"
    $a95="8aaa476518cc331f7339d70cf72f543a33f7e1b2952c4f6bf56b71b6"
    $a96="c11315aeaa36d95c7195d636b4144855f10cd435409e19602fa9644e"
    $a97="c11315aeaa36d95c7195d636b4144855f10cd435409e19602fa9644e"
    $a98="ce99f1339f1034b2c30dcf5bf263d1f7c5d525a45ff0a15ecdee9956"
    $a99="ce99f1339f1034b2c30dcf5bf263d1f7c5d525a45ff0a15ecdee9956"
    $a100="fc0b76a91e726f60f4ecb31ebc3d213fdab48350dba4eeff039c71f7"
    $a101="fc0b76a91e726f60f4ecb31ebc3d213fdab48350dba4eeff039c71f7"
    $a102="e4e19e17a94b3c68ec68a0285321c165f150a35bf7c8749fa79c75d5"
    $a103="e4e19e17a94b3c68ec68a0285321c165f150a35bf7c8749fa79c75d5"
    $a104="83038493361e62c5f5e6b6c8cc80bb63998b774750fcf2830c1281d8"
    $a105="83038493361e62c5f5e6b6c8cc80bb63998b774750fcf2830c1281d8"
    $a106="5f906da181de3e59ad031234e8a52f93bd8f7f12ffb0e709b8e421f5"
    $a107="5f906da181de3e59ad031234e8a52f93bd8f7f12ffb0e709b8e421f5"
    $a108="764583694663b970fcc8332a09de0ef6ed6bcfa03c32d8cfcc93414e"
    $a109="764583694663b970fcc8332a09de0ef6ed6bcfa03c32d8cfcc93414e"
    $a110="a401938933aa5f1c4978810cc3e07642aa36d49643ac93912272fafc"
    $a111="a401938933aa5f1c4978810cc3e07642aa36d49643ac93912272fafc"
    $a112="7ae6f4e9b7b7131a18f7bd2673720e3bc862acc3fa9ef5815503dec7"
    $a113="7ae6f4e9b7b7131a18f7bd2673720e3bc862acc3fa9ef5815503dec7"
    $a114="e35e1d453ff9d801e66c50730b5a85ceb5563ee087bba92a34124e75"
    $a115="e35e1d453ff9d801e66c50730b5a85ceb5563ee087bba92a34124e75"
    $a116="f64b39340de4b7fbecd689f17e5a7aeb254297b03cdd49ce7dd2dcc3"
    $a117="35922fe360a2588508eeecfb6ce51e70f3706b373207a30ec58ba8ff"
    $a118="37b702e65239563dce4de5524727f4e81f5d57717e444df10bf0c925"
    $a119="35922fe360a2588508eeecfb6ce51e70f3706b373207a30ec58ba8ff"
    $a120="35922fe360a2588508eeecfb6ce51e70f3706b373207a30ec58ba8ff"
    $a121="35922fe360a2588508eeecfb6ce51e70f3706b373207a30ec58ba8ff"
    $a122="52b73ff4203006522d588f542e4be108a6dd7b9a5fcb0b4b5d70eb36"
    $a123="52b73ff4203006522d588f542e4be108a6dd7b9a5fcb0b4b5d70eb36"
    $a124="4afc543b65c420e030f379f31eb54c2539514ce70154556ae237d987"
    $a125="ce2790734938a0b72cf497dda91abad0a7cdadc8436c9f64cbab6a41"
    $a126="c57d384df595a5bf054389ec040de6669d1cd501a75b200f702665c7"
    $a127="ce2790734938a0b72cf497dda91abad0a7cdadc8436c9f64cbab6a41"
    $a128="f6d6e1c7449f92baaeb2486fb679f0c2b26c44e009111e996b2aa07b"
    $a129="ce2790734938a0b72cf497dda91abad0a7cdadc8436c9f64cbab6a41"
    $a130="ce2790734938a0b72cf497dda91abad0a7cdadc8436c9f64cbab6a41"
    $a131="ce2790734938a0b72cf497dda91abad0a7cdadc8436c9f64cbab6a41"
    $a132="4206f3548d0390fee68647043cb4e876c3c584da9878f70f99a0d332"
    $a133="c827528f751bc8e4b259722928d666ccb27dc02efd9e57ba56b597d5"
    $a134="c827528f751bc8e4b259722928d666ccb27dc02efd9e57ba56b597d5"
    $a135="c827528f751bc8e4b259722928d666ccb27dc02efd9e57ba56b597d5"
    $a136="d5b8194cb0b4a0e6ed4f0529e8526a4c6fdb0612eeeaf6529e8923be"
    $a137="4206f3548d0390fee68647043cb4e876c3c584da9878f70f99a0d332"
    $a138="56b3a8db2bcf52775e253eee6bd9dfca1efea6502424dfba662a2be3"
    $a139="56b3a8db2bcf52775e253eee6bd9dfca1efea6502424dfba662a2be3"
    $a140="917ecca24f3e6ceaf52375d8083381f1f80a21e6e49fbadc40afeb8e"
    $a141="917ecca24f3e6ceaf52375d8083381f1f80a21e6e49fbadc40afeb8e"
    $a142="d5b8194cb0b4a0e6ed4f0529e8526a4c6fdb0612eeeaf6529e8923be"
    $a143="d5b8194cb0b4a0e6ed4f0529e8526a4c6fdb0612eeeaf6529e8923be"
    $a144="91f0572f12a77295e530583937e9d463c37c11760562e189cbb8188c"
    $a145="da79ee73928d0b41045809fe692e468aea0f869f025365e6438ad159"
    $a146="b23738f025c17ef1d9c22039f9947eb6152b5ea0e8f382c30bd8c69f"
    $a147="b23738f025c17ef1d9c22039f9947eb6152b5ea0e8f382c30bd8c69f"
    $a148="da79ee73928d0b41045809fe692e468aea0f869f025365e6438ad159"
    $a149="da79ee73928d0b41045809fe692e468aea0f869f025365e6438ad159"
    $a150="bc09b5496efc6b228e7cee34701ee4c25b2e348ca9e32444a195bc02"
    $a151="bc09b5496efc6b228e7cee34701ee4c25b2e348ca9e32444a195bc02"
    $a152="9ccdb57ec0de58e798f1cb2d0a8d0719347a2af6b1608e801e05d62b"
    $a153="9ccdb57ec0de58e798f1cb2d0a8d0719347a2af6b1608e801e05d62b"
condition:
    ($a0 and $a1) or ($a2 and $a3) or ($a4 and $a5) or ($a6 and $a7) or ($a8 and $a9) or ($a10 and $a11) or ($a12 and $a13) or ($a14 and $a15) or ($a16 and $a17) or ($a18 and $a19) or ($a20 and $a21) or ($a22 and $a23) or ($a24 and $a25) or ($a26 and $a27) or ($a28 and $a29) or ($a30 and $a31) or ($a32 and $a33) or ($a34 and $a35) or ($a36 and $a37) or ($a38 and $a39) or ($a40 and $a41) or ($a42 and $a43) or ($a44 and $a45) or ($a46 and $a47) or ($a48 and $a49) or ($a50 and $a51) or ($a52 and $a53) or ($a54 and $a55) or ($a56 and $a57) or ($a58 and $a59) or ($a60 and $a61) or ($a62 and $a63) or ($a64 and $a65) or ($a66 and $a67) or ($a68 and $a69) or ($a70 and $a71) or ($a72 and $a73) or ($a74 and $a75) or ($a76 and $a77) or ($a78 and $a79) or ($a80 and $a81) or ($a82 and $a83) or ($a84 and $a85) or ($a86 and $a87) or ($a88 and $a89) or ($a90 and $a91) or ($a92 and $a93) or ($a94 and $a95) or ($a96 and $a97) or ($a98 and $a99) or ($a100 and $a101) or ($a102 and $a103) or ($a104 and $a105) or ($a106 and $a107) or ($a108 and $a109) or ($a110 and $a111) or ($a112 and $a113) or ($a114 and $a115) or ($a116 and $a117) or ($a118 and $a119) or ($a120 and $a121) or ($a122 and $a123) or ($a124 and $a125) or ($a126 and $a127) or ($a128 and $a129) or ($a130 and $a131) or ($a132 and $a133) or ($a134 and $a135) or ($a136 and $a137) or ($a138 and $a139) or ($a140 and $a141) or ($a142 and $a143) or ($a144 and $a145) or ($a146 and $a147) or ($a148 and $a149) or ($a150 and $a151) or ($a152 and $a153)
}
[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

e0b02cab-f5bc-4681-ad15-d5ecd0d5e2c0
Propose edits, view related rules, and engage with the community through comments.
Executable code, not a declarative rule
This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.
Rejected pattern present
[[ reason ]]
What does this mean?
Format & documentation suggestions
Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.
[[ reason ]]
What do these messages mean?
[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion
