[[ fm.text ]] Click here
blake2b_hashed_default_creds_digital_equipment

YARA detection rule by Alaa Jubakhanji@ndaal Gesellschaft fürSicherheit in der Informationstechnik mbH & Co KG · GPL-2.0
Hashed values of default credentials for digital_equipment.
rule blake2b_hashed_default_creds_digital_equipment
{
    meta:
        version = "1.0"
        status = "RELEASED"
        sharing = "TLP:WHITE"
        source = "NDAAL GESELLSCHAFT FÜR SICHERHEIT INDER INFORMATIONSTECHNIK MBH & CO KG"
        author = "Alaa Jubakhanji@ndaal Gesellschaft fürSicherheit in der Informationstechnik mbH & Co KG"
        description = "Hashed values of default credentials for digital_equipment."
        category = "INFO"
        info = "BLAKE2B"
        reference = "https://gitlab.com/ndaal_open_source/ndaal_yara_passwords_default/-/tree/main/yara_rules"

strings:
    $a0="418e067849f52dff3c3af5d854b975f50cf35698c8d5738c467daf3aefe6e6bbf263345c0d74d7e86b0a1a7888ca580ae5d9783b19bf8d89dee63ac5cbe123ab"
    $a1="ea4b455428cbb35c8170f7be4cb8094fb4ee82c2b05d937d7179086b317b5eee2899159f4895e346bc6edff498bf11f6f6c3ce9afbfc26b98a3f36cb750aa994"
    $a2="f05cc1dce30522404088964d1d989a90a5e73960f95e2bb823058768cab802b81413bfcc8baa755c2319bccccf5255686c9afaf59c769ecd4d2cf66b13d133f1"
    $a3="1ced8f5be2db23a6513eba4d819c73806424748a7bc6fa0d792cc1c7d1775a9778e894aa91413f6eb79ad5ae2f871eafcc78797e4c82af6d1cbfb1a294a10d10"
    $a4="1645ae4b5b2eb6fbe61362cd6d7a1fc4862db293d0e6f24d62731e836b5c42c3c38a80a370036c992ef1b42c8b2dfb1ff7df21589826b40ff393301f51459776"
    $a5="1ced8f5be2db23a6513eba4d819c73806424748a7bc6fa0d792cc1c7d1775a9778e894aa91413f6eb79ad5ae2f871eafcc78797e4c82af6d1cbfb1a294a10d10"
    $a6="14d75f5d037f10e2030d4e9d33b43014494482955a2e814847ac3fbbfb110f1c70356039807c333c5b1010f6af36d86d7f15991d995eb600ee6ade6ed1356cbc"
    $a7="1ced8f5be2db23a6513eba4d819c73806424748a7bc6fa0d792cc1c7d1775a9778e894aa91413f6eb79ad5ae2f871eafcc78797e4c82af6d1cbfb1a294a10d10"
    $a8="6bce1a0350103a3c0ea2e92c31f49ad88a58bd485dfce6f57a32502f69b98a0fe7e115f82e3a382a4f13a2d0bc966b21d363dee0d4cb1254a62b72414065b9a2"
    $a9="c5faca15ac2f93578b39ef4b6bbb871bdedce4ddd584fd31f0bb66fade3947e6bb1353e562414ed50638a8829ff3daccac7ef4a50acee72a5384ba9aeb604fc9"
    $a10="f05cc1dce30522404088964d1d989a90a5e73960f95e2bb823058768cab802b81413bfcc8baa755c2319bccccf5255686c9afaf59c769ecd4d2cf66b13d133f1"
    $a11="c5faca15ac2f93578b39ef4b6bbb871bdedce4ddd584fd31f0bb66fade3947e6bb1353e562414ed50638a8829ff3daccac7ef4a50acee72a5384ba9aeb604fc9"
    $a12="1645ae4b5b2eb6fbe61362cd6d7a1fc4862db293d0e6f24d62731e836b5c42c3c38a80a370036c992ef1b42c8b2dfb1ff7df21589826b40ff393301f51459776"
    $a13="c5faca15ac2f93578b39ef4b6bbb871bdedce4ddd584fd31f0bb66fade3947e6bb1353e562414ed50638a8829ff3daccac7ef4a50acee72a5384ba9aeb604fc9"
    $a14="14d75f5d037f10e2030d4e9d33b43014494482955a2e814847ac3fbbfb110f1c70356039807c333c5b1010f6af36d86d7f15991d995eb600ee6ade6ed1356cbc"
    $a15="c5faca15ac2f93578b39ef4b6bbb871bdedce4ddd584fd31f0bb66fade3947e6bb1353e562414ed50638a8829ff3daccac7ef4a50acee72a5384ba9aeb604fc9"
    $a16="24c137b8674b3222ad1c889f0a6f7eb475ae72db9a2304534a5fb27daaa5d4487c0a8da8b852356649a43bbb99545bcaf8e2032fca300ae40d749cc9cac17f98"
    $a17="78a42a89d6e562a77f7e1782f29ac05e8c7dea6ccf51c50c9e38bbf09611577f4f6743ef6ea0419c9d536843a42df0195fbc2a404aebfe77de8edc82eb858694"
    $a18="24c137b8674b3222ad1c889f0a6f7eb475ae72db9a2304534a5fb27daaa5d4487c0a8da8b852356649a43bbb99545bcaf8e2032fca300ae40d749cc9cac17f98"
    $a19="73776e3e4cd3684316d26ec93cc6c438497ace5b08e359698667af6dbded88b6750ba0b2c11ba7d52b69180f1924884a158d0b83d87ca9c65d2dae9d73387e43"
    $a20="6bce1a0350103a3c0ea2e92c31f49ad88a58bd485dfce6f57a32502f69b98a0fe7e115f82e3a382a4f13a2d0bc966b21d363dee0d4cb1254a62b72414065b9a2"
    $a21="d5c47f63555ae063383c2a0df82bf309d90932bc8dd66a056d80e4d913e821faacf7e0e962c7bbac6c193e1e638b58b8baa1e71f57a945958b84c11536b7a82d"
    $a22="38cbc137abb26cc501d60e13b9eb576752e2d05d7153961e0e07d6c29e7e0d3203da75ffa6cd13ba56220aa0423611823bf10418335fffa0659350a29a50e07f"
    $a23="38cbc137abb26cc501d60e13b9eb576752e2d05d7153961e0e07d6c29e7e0d3203da75ffa6cd13ba56220aa0423611823bf10418335fffa0659350a29a50e07f"
    $a24="4a63d1070f565a14ab815724351e8ed4d44e55331b7afe44d0fb8c53ed626c66f241816ee09ed2a3e172a396e051e95fd05e5ab8dbacf248788420c2a9b78a0d"
    $a25="4a63d1070f565a14ab815724351e8ed4d44e55331b7afe44d0fb8c53ed626c66f241816ee09ed2a3e172a396e051e95fd05e5ab8dbacf248788420c2a9b78a0d"
    $a26="1dd16f9f56b6442039e8260d702d50163413d40d1097876c9348d11c2e654bdfa54b073b10f2ac61de4b01ae87d9f14acfb32dd7b86c849b841715c2638dbdb8"
    $a27="1dd16f9f56b6442039e8260d702d50163413d40d1097876c9348d11c2e654bdfa54b073b10f2ac61de4b01ae87d9f14acfb32dd7b86c849b841715c2638dbdb8"
    $a28="e786675648294cdbd670c255b3b8aa116867ca8e41c0ed4bd709bd82da186ac8d0eea68245c3af686883d69a264206ac7e0df5869d61d8807c82d26b5d5b2983"
    $a29="e786675648294cdbd670c255b3b8aa116867ca8e41c0ed4bd709bd82da186ac8d0eea68245c3af686883d69a264206ac7e0df5869d61d8807c82d26b5d5b2983"
    $a30="d9fbb06c1f427a4fa57b71bb3cf1a64bb6c3880e3e7282e21bcec773e9f1856b07b5d88b548c3cf12d62bf006fb212d096f15f5b5c7c31be5e57ceeda0cd335a"
    $a31="d9fbb06c1f427a4fa57b71bb3cf1a64bb6c3880e3e7282e21bcec773e9f1856b07b5d88b548c3cf12d62bf006fb212d096f15f5b5c7c31be5e57ceeda0cd335a"
    $a32="6d61424aeafb086ab1793a1902e567a8b540d4b6cec0e96135a9e61bff3ff3087d9470e0e44066e585be27cb27ea1a24f3afcffb0006cc34e251c747d7c20f20"
    $a33="6d61424aeafb086ab1793a1902e567a8b540d4b6cec0e96135a9e61bff3ff3087d9470e0e44066e585be27cb27ea1a24f3afcffb0006cc34e251c747d7c20f20"
    $a34="dc4dcff1032d9287344ad486fb066e394d794ed68ead1e3831a8e6684b38e0bc16e5926e442985b477ea63a3e346146310c5a7c84cd7b9979a8eb7aaf155db21"
    $a35="dc4dcff1032d9287344ad486fb066e394d794ed68ead1e3831a8e6684b38e0bc16e5926e442985b477ea63a3e346146310c5a7c84cd7b9979a8eb7aaf155db21"
    $a36="98ba37bc6400dcfb01f63737d69dd0cdd19169463b8cd1fd92bfc24cab1e5590480043353b915a7d020113ddc26eb2f3d9224d6b2d3b09fb2641ab0de1275783"
    $a37="98ba37bc6400dcfb01f63737d69dd0cdd19169463b8cd1fd92bfc24cab1e5590480043353b915a7d020113ddc26eb2f3d9224d6b2d3b09fb2641ab0de1275783"
    $a38="ce9bb2a4c9be5001c230bc250bf4b843184bc3574c3b62dccaa2a032e144b5d10418f1efecd8117cb91c167eb8675efa20609b1a1affe9353c2ef3d171afe0fc"
    $a39="ce9bb2a4c9be5001c230bc250bf4b843184bc3574c3b62dccaa2a032e144b5d10418f1efecd8117cb91c167eb8675efa20609b1a1affe9353c2ef3d171afe0fc"
    $a40="cb815d84335b75233f75800bc0db7ac472c3ee4ca8db63293391cb40578cde2037c26d3fb45db2a9cadcc60ebd33832fca16668b72a91f75409a66251d7b02fc"
    $a41="cb815d84335b75233f75800bc0db7ac472c3ee4ca8db63293391cb40578cde2037c26d3fb45db2a9cadcc60ebd33832fca16668b72a91f75409a66251d7b02fc"
    $a42="30934bc1665c8ff34d42664da4a5605e77776e4169675e1d5eed26ecbff976179c5179599f7ddb0a214b305e088b064f17259ae7f52b1577919c9330f5f9dccf"
    $a43="cb815d84335b75233f75800bc0db7ac472c3ee4ca8db63293391cb40578cde2037c26d3fb45db2a9cadcc60ebd33832fca16668b72a91f75409a66251d7b02fc"
    $a44="18908fbe61599f1d0bad97f7b039b33092bee5cda8b3cb036cd18e552978101b56f00f8f5ff286badff44ee7996c78a1e66ebc85b92d79715c2842cd70baf724"
    $a45="18908fbe61599f1d0bad97f7b039b33092bee5cda8b3cb036cd18e552978101b56f00f8f5ff286badff44ee7996c78a1e66ebc85b92d79715c2842cd70baf724"
    $a46="ab1aaa9c1edaa8fa6a0798601d6b00ebf97a842abfdbc921ed8cc8b67f0af0cce5b46c4634c4a4b12c405e7580f028c90abf26db2f4d627e869d019330ab1534"
    $a47="18908fbe61599f1d0bad97f7b039b33092bee5cda8b3cb036cd18e552978101b56f00f8f5ff286badff44ee7996c78a1e66ebc85b92d79715c2842cd70baf724"
    $a48="ac6a680d94b3f2331f9a9e02397c14fa08e0e4f4c07527e311aa60c3753450f23b408af9b31491dbfad20171fb044544ad604dc5ad6bcb3a00818ec24ab19c00"
    $a49="ac6a680d94b3f2331f9a9e02397c14fa08e0e4f4c07527e311aa60c3753450f23b408af9b31491dbfad20171fb044544ad604dc5ad6bcb3a00818ec24ab19c00"
    $a50="5c595d4e2b882d7f9a9183344cc2bff029dd28010cb10abf380240ca12dff4204f1ce47ee630b2afd69c19d4abd2af73515cd2c80cc23812a535fac40fc7cd63"
    $a51="5c595d4e2b882d7f9a9183344cc2bff029dd28010cb10abf380240ca12dff4204f1ce47ee630b2afd69c19d4abd2af73515cd2c80cc23812a535fac40fc7cd63"
    $a52="a24253a99acc9e3c83e0655af14b72bc8b2c0ad6c62fc655848fac82e7786531429d226006fdee1e1b6da62a38d904390d1e34cf92fba5338d343fab9de41018"
    $a53="c057172bf4528c32eca7ec5482cd309f8c292ce93027d87339bfbaf06cf6eda653fbc29090d962e7a73a48f788620d7c2054216b8725da9be029cf85c8a6d84d"
    $a54="c057172bf4528c32eca7ec5482cd309f8c292ce93027d87339bfbaf06cf6eda653fbc29090d962e7a73a48f788620d7c2054216b8725da9be029cf85c8a6d84d"
    $a55="c057172bf4528c32eca7ec5482cd309f8c292ce93027d87339bfbaf06cf6eda653fbc29090d962e7a73a48f788620d7c2054216b8725da9be029cf85c8a6d84d"
    $a56="0ec6ca483ca1dc2b6d409491e318643171b356dbe1bbdb5725a4837ece9b4984b5e56faeff71b59117de5a4d5620d476c2eb447896ff693b884bc87a9e451af2"
    $a57="c057172bf4528c32eca7ec5482cd309f8c292ce93027d87339bfbaf06cf6eda653fbc29090d962e7a73a48f788620d7c2054216b8725da9be029cf85c8a6d84d"
    $a58="5322bc39e200a6d2ef54ac6716376d5000f98a9715cb5293edd6e1e0f8865d3b22cb0fa92e09d52abef0cf58a2b067d4bc64fbee1e4bce0e9e642ce803dc6f99"
    $a59="c057172bf4528c32eca7ec5482cd309f8c292ce93027d87339bfbaf06cf6eda653fbc29090d962e7a73a48f788620d7c2054216b8725da9be029cf85c8a6d84d"
    $a60="3afd6216b404b8d2096d30f6aaa7d934cdb0902e3f361a474d88beb76d6210a3fba16e60fc071a1195ab2ac97f489aa18ffa146a12be95a509b22fd15671769c"
    $a61="3afd6216b404b8d2096d30f6aaa7d934cdb0902e3f361a474d88beb76d6210a3fba16e60fc071a1195ab2ac97f489aa18ffa146a12be95a509b22fd15671769c"
    $a62="e21c76e237d0aaedceb13a39b9f864693fa15b8651d537fdfe3e896331882b024aa98bba9cf55bebfec4eb23a778ae6698a64beed56edf028dc877cd4c7f836a"
    $a63="e21c76e237d0aaedceb13a39b9f864693fa15b8651d537fdfe3e896331882b024aa98bba9cf55bebfec4eb23a778ae6698a64beed56edf028dc877cd4c7f836a"
    $a64="0368d326883e915bd8d54f47905e9c26402612dbda2012769a789137f2055d51cfafe77049cd098405c908826213db6428177a97109892ba98d0acc62f014b1a"
    $a65="0368d326883e915bd8d54f47905e9c26402612dbda2012769a789137f2055d51cfafe77049cd098405c908826213db6428177a97109892ba98d0acc62f014b1a"
    $a66="5ab4b5f04f35e70ff0eb4ca7b8955218485c58101a51084421c00a24c0706c8c6a4594010fb730a0a65b92ad00540489e7c13f0faae4595da6741c8af8e3d00b"
    $a67="5ab4b5f04f35e70ff0eb4ca7b8955218485c58101a51084421c00a24c0706c8c6a4594010fb730a0a65b92ad00540489e7c13f0faae4595da6741c8af8e3d00b"
    $a68="fa773ba8cb4eb8821613663e9d4ef05a79d9b86cb005211e4ea05224f291e240cc22796b7852c33f9b59d520d10ecd259082dffa6932e720b874e732c5198c78"
    $a69="fa773ba8cb4eb8821613663e9d4ef05a79d9b86cb005211e4ea05224f291e240cc22796b7852c33f9b59d520d10ecd259082dffa6932e720b874e732c5198c78"
    $a70="4ee6bbfcfa0cfac92b644b61b1b735c766a5742367eb29d9391e1eb63c04f9e418ca5748628e394e6f05767e4e0afb46f7ad34f6e595f21d9067355ad89e12a3"
    $a71="4ee6bbfcfa0cfac92b644b61b1b735c766a5742367eb29d9391e1eb63c04f9e418ca5748628e394e6f05767e4e0afb46f7ad34f6e595f21d9067355ad89e12a3"
    $a72="86b39406c43d588b4ddfe555710032977fa7db187ef7de73c59bffdb5b7bd84919a9d98fbc3a1fc30390cac83cc96700ccd2ad9cd160bbd2c857f88a6dc72956"
    $a73="86b39406c43d588b4ddfe555710032977fa7db187ef7de73c59bffdb5b7bd84919a9d98fbc3a1fc30390cac83cc96700ccd2ad9cd160bbd2c857f88a6dc72956"
    $a74="b850506a7177942167720ea4ac6da357e1dea57843867242b80e937edfd7f94a575457bf6845781ac4c81e398afacce81c6b8218bd84d8861299f736075e30cc"
    $a75="b850506a7177942167720ea4ac6da357e1dea57843867242b80e937edfd7f94a575457bf6845781ac4c81e398afacce81c6b8218bd84d8861299f736075e30cc"
    $a76="f05cc1dce30522404088964d1d989a90a5e73960f95e2bb823058768cab802b81413bfcc8baa755c2319bccccf5255686c9afaf59c769ecd4d2cf66b13d133f1"
    $a77="f05cc1dce30522404088964d1d989a90a5e73960f95e2bb823058768cab802b81413bfcc8baa755c2319bccccf5255686c9afaf59c769ecd4d2cf66b13d133f1"
    $a78="055d668d224978a40071b18d06b9ea08e2fc8bcb48ce82bb27d6c823102ce8eb5ab5fcd14adaad530f7e3458d5c8df486b8f4422fb57b5901c3a4e90d8897028"
    $a79="055d668d224978a40071b18d06b9ea08e2fc8bcb48ce82bb27d6c823102ce8eb5ab5fcd14adaad530f7e3458d5c8df486b8f4422fb57b5901c3a4e90d8897028"
    $a80="8b30c00424eb170ea331767d5691ef9590eb94fdb46f03f69bf8a98943904fdb3a10dab71ea9e6a7e9531003437f30e1807552954be97c4361cdf76c3770e69a"
    $a81="8b30c00424eb170ea331767d5691ef9590eb94fdb46f03f69bf8a98943904fdb3a10dab71ea9e6a7e9531003437f30e1807552954be97c4361cdf76c3770e69a"
    $a82="d7266a22dc29da24f83bc45064ec19c41044f6b1047b33a75fedb908b0d45a8827216b0fe72cc39a00a9527e3707301f01d3dc14b5fb1ce117d0e81fd81e2b76"
    $a83="d7266a22dc29da24f83bc45064ec19c41044f6b1047b33a75fedb908b0d45a8827216b0fe72cc39a00a9527e3707301f01d3dc14b5fb1ce117d0e81fd81e2b76"
    $a84="e43efaa3f0917a09c210ca6d1a3bfec6b105fc3848f49395989bc8318d259c934e349b0a43f7771c698a9a6d59b59129d4e87c8c49500e61546c66bcef3beb0c"
    $a85="e43efaa3f0917a09c210ca6d1a3bfec6b105fc3848f49395989bc8318d259c934e349b0a43f7771c698a9a6d59b59129d4e87c8c49500e61546c66bcef3beb0c"
    $a86="2f30329e148dc8917d41010f50aafdb5a1323c6bce68352a14fdebb6bc7e99a62748bc07f87dcefa02e50ce44932012752f38c1baf28113bb611d31d79eab5b3"
    $a87="2f30329e148dc8917d41010f50aafdb5a1323c6bce68352a14fdebb6bc7e99a62748bc07f87dcefa02e50ce44932012752f38c1baf28113bb611d31d79eab5b3"
    $a88="189a6d9963c6737466761adf5a280ec8e9a9acf74cb4232f25375972180223ee8c5c132aee624cd9017935e2e3f18df0da99de2758bd48c25b521b508119c1d3"
    $a89="189a6d9963c6737466761adf5a280ec8e9a9acf74cb4232f25375972180223ee8c5c132aee624cd9017935e2e3f18df0da99de2758bd48c25b521b508119c1d3"
    $a90="1ea0cf6a5d688a8ac74ddb9200cc9353d3675b72cd65da27dd1e0499016764a29bad40f28974ee90a8988c5e5f4a0ba29ac1ce7bec880eec4e6a3457801b1ab8"
    $a91="1ea0cf6a5d688a8ac74ddb9200cc9353d3675b72cd65da27dd1e0499016764a29bad40f28974ee90a8988c5e5f4a0ba29ac1ce7bec880eec4e6a3457801b1ab8"
    $a92="d230428f78de6b4d82df4a3cf4ffa430b5f7ee3485107cb37cda32c5807e6a4ccd72f533b739b907fb9d410e1318f6b3e2cb0c4b39a571fce2478020cd364fa3"
    $a93="d230428f78de6b4d82df4a3cf4ffa430b5f7ee3485107cb37cda32c5807e6a4ccd72f533b739b907fb9d410e1318f6b3e2cb0c4b39a571fce2478020cd364fa3"
    $a94="35a53123b3312215dfffa00340dd359260a33cb8aa50c5be4dc0abeaaab8506d3918f44626c2f932e20414407b2bacb5f96f645d9566bfcfe66aac768d52c207"
    $a95="35a53123b3312215dfffa00340dd359260a33cb8aa50c5be4dc0abeaaab8506d3918f44626c2f932e20414407b2bacb5f96f645d9566bfcfe66aac768d52c207"
    $a96="ace75630b53da72edbb72b758887ffff6c6bd1c82d776155ae2b6969a29b2d9f06e2865f739261a4a9c1937b9a5d6fc21bedeb61f62c7d66d53ef33f051eb75a"
    $a97="ace75630b53da72edbb72b758887ffff6c6bd1c82d776155ae2b6969a29b2d9f06e2865f739261a4a9c1937b9a5d6fc21bedeb61f62c7d66d53ef33f051eb75a"
    $a98="40b33da1cc6464ad28664a3197de26d436f7d4ef6520b8a2df3da660aa4e8881ba334ebe30750f66ac9124712bc0ac09bad63450d63575d8599bea466190ed63"
    $a99="40b33da1cc6464ad28664a3197de26d436f7d4ef6520b8a2df3da660aa4e8881ba334ebe30750f66ac9124712bc0ac09bad63450d63575d8599bea466190ed63"
    $a100="e7cf0c41e91dc6ccb10a10a9e85e627833fbcff1ad4718550f31a42116949a7ce02ad475e58dd8c1f165041e7ab7b866ed611703756d071fe78cbd5a82b90e33"
    $a101="e7cf0c41e91dc6ccb10a10a9e85e627833fbcff1ad4718550f31a42116949a7ce02ad475e58dd8c1f165041e7ab7b866ed611703756d071fe78cbd5a82b90e33"
    $a102="a220fb67eacbdd5ef0e2234f7968e7ca2bd67e813731268f03d344c89bf30b116ff2c58ae174d425bfc7b5ea158bc5bda91ff18fd4cc0e85822448420c09803a"
    $a103="a220fb67eacbdd5ef0e2234f7968e7ca2bd67e813731268f03d344c89bf30b116ff2c58ae174d425bfc7b5ea158bc5bda91ff18fd4cc0e85822448420c09803a"
    $a104="e8e9e2996f41ff2de80c7900d803a8c2c58d4e31853e53db634c9c13a4a0f389ca5c608e91902a206eceb2fd630052e92296f17e872a930dabdefe98c65a195f"
    $a105="e8e9e2996f41ff2de80c7900d803a8c2c58d4e31853e53db634c9c13a4a0f389ca5c608e91902a206eceb2fd630052e92296f17e872a930dabdefe98c65a195f"
    $a106="77e655029fd3906f9c56d1b22a3ae729763e766f238f0034b6ee736f08b5d1705e3f61f057fdb04741d458435141207bfd4de7ae60070031927a854180054bdb"
    $a107="77e655029fd3906f9c56d1b22a3ae729763e766f238f0034b6ee736f08b5d1705e3f61f057fdb04741d458435141207bfd4de7ae60070031927a854180054bdb"
    $a108="5cd25b1467843248a18623c031ee52ab5209119bca3ccca0c22ddb0e7c12739ade2850bcd771e186310b0bc4de5d0867bfc1f7df2ada989ef73327b3ea827178"
    $a109="5cd25b1467843248a18623c031ee52ab5209119bca3ccca0c22ddb0e7c12739ade2850bcd771e186310b0bc4de5d0867bfc1f7df2ada989ef73327b3ea827178"
    $a110="48f01409a5863adbd3d85c5b9a9e66c89a0725ee8540c11a5e1565da307df1aa7bca90d08fadb3e45f8d02127618f583eb7083df995b94c9c7240279b4f07428"
    $a111="48f01409a5863adbd3d85c5b9a9e66c89a0725ee8540c11a5e1565da307df1aa7bca90d08fadb3e45f8d02127618f583eb7083df995b94c9c7240279b4f07428"
    $a112="54fa2abd968eb49b98e883cdecb272203b14d7376e8de4fb89ccd987546fafbe23f5988ef39aed99a7fb9ac0cd3751dee8ae7faeb9095a6a6a202692d5812599"
    $a113="54fa2abd968eb49b98e883cdecb272203b14d7376e8de4fb89ccd987546fafbe23f5988ef39aed99a7fb9ac0cd3751dee8ae7faeb9095a6a6a202692d5812599"
    $a114="e21df912675607840d49b2199a7cb29fb7cff08467653cd92dd31e247b19935c929d04e9ae6b14ab953edfc8524ba01d9a90702d68f60e7aafc19677a08f8c6f"
    $a115="e21df912675607840d49b2199a7cb29fb7cff08467653cd92dd31e247b19935c929d04e9ae6b14ab953edfc8524ba01d9a90702d68f60e7aafc19677a08f8c6f"
    $a116="a24253a99acc9e3c83e0655af14b72bc8b2c0ad6c62fc655848fac82e7786531429d226006fdee1e1b6da62a38d904390d1e34cf92fba5338d343fab9de41018"
    $a117="88a02e8ba56c1cebfc55bbb8ac65bcf7710392adf168e8c2741329aa6637a70610824a4eb65f3e40464923454b1c34d026b3b49d7117e2c1e90b72da50a3c067"
    $a118="0ec6ca483ca1dc2b6d409491e318643171b356dbe1bbdb5725a4837ece9b4984b5e56faeff71b59117de5a4d5620d476c2eb447896ff693b884bc87a9e451af2"
    $a119="88a02e8ba56c1cebfc55bbb8ac65bcf7710392adf168e8c2741329aa6637a70610824a4eb65f3e40464923454b1c34d026b3b49d7117e2c1e90b72da50a3c067"
    $a120="88a02e8ba56c1cebfc55bbb8ac65bcf7710392adf168e8c2741329aa6637a70610824a4eb65f3e40464923454b1c34d026b3b49d7117e2c1e90b72da50a3c067"
    $a121="88a02e8ba56c1cebfc55bbb8ac65bcf7710392adf168e8c2741329aa6637a70610824a4eb65f3e40464923454b1c34d026b3b49d7117e2c1e90b72da50a3c067"
    $a122="5ad3226335c19dfefa78fe39a478d98d3c68ae62916647b4368c6ea5c36d138d7633018f89f2bce9d8314cb3f0805e9aaee619e5a37936e24c105a1ab8217059"
    $a123="5ad3226335c19dfefa78fe39a478d98d3c68ae62916647b4368c6ea5c36d138d7633018f89f2bce9d8314cb3f0805e9aaee619e5a37936e24c105a1ab8217059"
    $a124="6930e64d4c46e0147bc35153ae864d8fc5ff5b6b3e7328600af1f6ba44751e2cf0e9be9dee7884551f20d74ea48199eef3931241a9a741c9c923429c45bc3adf"
    $a125="418e067849f52dff3c3af5d854b975f50cf35698c8d5738c467daf3aefe6e6bbf263345c0d74d7e86b0a1a7888ca580ae5d9783b19bf8d89dee63ac5cbe123ab"
    $a126="88f3687a11fcc4215c7b3e53bacdf0b21afc39786e9438b11ee64f33f49a8becb6b16041c947d73e8669718177c09c517937ba3bb30e9a14ad2716f8027d2147"
    $a127="418e067849f52dff3c3af5d854b975f50cf35698c8d5738c467daf3aefe6e6bbf263345c0d74d7e86b0a1a7888ca580ae5d9783b19bf8d89dee63ac5cbe123ab"
    $a128="752820fd0b95366f2180e2d41bad2a7ef05454442dc57d2914e4c70d351aeea11b9b14771487de0b3e688cd679839e5402919c1a315ed777fd822cbe04905fc3"
    $a129="418e067849f52dff3c3af5d854b975f50cf35698c8d5738c467daf3aefe6e6bbf263345c0d74d7e86b0a1a7888ca580ae5d9783b19bf8d89dee63ac5cbe123ab"
    $a130="418e067849f52dff3c3af5d854b975f50cf35698c8d5738c467daf3aefe6e6bbf263345c0d74d7e86b0a1a7888ca580ae5d9783b19bf8d89dee63ac5cbe123ab"
    $a131="418e067849f52dff3c3af5d854b975f50cf35698c8d5738c467daf3aefe6e6bbf263345c0d74d7e86b0a1a7888ca580ae5d9783b19bf8d89dee63ac5cbe123ab"
    $a132="d9ab89366d9be69423738b199a2ac63b39e3c91fb2de7af9bb174a401f99ac59f7c5e3c94af85406a5720d54d241a3fcce19eefab17631669c91c8dec3312f0d"
    $a133="b0997b0bf8a55e8cc97ccdd5d49a8e0ffb5eac0affc130da23e859b3aaad1a76428bb78e97031cdda3fda0e2798d01105638df311dc600ccb2f4f2ab97b1ddc8"
    $a134="b0997b0bf8a55e8cc97ccdd5d49a8e0ffb5eac0affc130da23e859b3aaad1a76428bb78e97031cdda3fda0e2798d01105638df311dc600ccb2f4f2ab97b1ddc8"
    $a135="b0997b0bf8a55e8cc97ccdd5d49a8e0ffb5eac0affc130da23e859b3aaad1a76428bb78e97031cdda3fda0e2798d01105638df311dc600ccb2f4f2ab97b1ddc8"
    $a136="c651e78dd9548a13ca5b6f90bb82ec16e3dff729102788cfe38f41ec97cc9a4e6b33be68423aeb73284dedd8cc54b35221a26f95afe6b57331f60488831e4e14"
    $a137="d9ab89366d9be69423738b199a2ac63b39e3c91fb2de7af9bb174a401f99ac59f7c5e3c94af85406a5720d54d241a3fcce19eefab17631669c91c8dec3312f0d"
    $a138="42111fcee868bafd7f5f7e9ece4de0823ef315217ebce4a01bb6b93c8bd294e4dcf9032173ebbb90a5ffd5639aed7467fd91d0d8b8e7479857b18a8fa35be80d"
    $a139="42111fcee868bafd7f5f7e9ece4de0823ef315217ebce4a01bb6b93c8bd294e4dcf9032173ebbb90a5ffd5639aed7467fd91d0d8b8e7479857b18a8fa35be80d"
    $a140="5322bc39e200a6d2ef54ac6716376d5000f98a9715cb5293edd6e1e0f8865d3b22cb0fa92e09d52abef0cf58a2b067d4bc64fbee1e4bce0e9e642ce803dc6f99"
    $a141="5322bc39e200a6d2ef54ac6716376d5000f98a9715cb5293edd6e1e0f8865d3b22cb0fa92e09d52abef0cf58a2b067d4bc64fbee1e4bce0e9e642ce803dc6f99"
    $a142="c651e78dd9548a13ca5b6f90bb82ec16e3dff729102788cfe38f41ec97cc9a4e6b33be68423aeb73284dedd8cc54b35221a26f95afe6b57331f60488831e4e14"
    $a143="c651e78dd9548a13ca5b6f90bb82ec16e3dff729102788cfe38f41ec97cc9a4e6b33be68423aeb73284dedd8cc54b35221a26f95afe6b57331f60488831e4e14"
    $a144="38b87a7cb8dbaed67f4a22bf16a2098fff56dbe813363739a8310ae55ee506c01e27cf78a48f8c34c36d428c5ae4363f577baf6b2a7ebcf736b4506c082e1158"
    $a145="ab1aaa9c1edaa8fa6a0798601d6b00ebf97a842abfdbc921ed8cc8b67f0af0cce5b46c4634c4a4b12c405e7580f028c90abf26db2f4d627e869d019330ab1534"
    $a146="9162babb0f35f0beda8ee72d9f5caa4ff9a63d46b8571e4335071f161bab2465c48aab4a7889059a201ed01e26848e7ef139b8589d16c7b064c0266409130087"
    $a147="9162babb0f35f0beda8ee72d9f5caa4ff9a63d46b8571e4335071f161bab2465c48aab4a7889059a201ed01e26848e7ef139b8589d16c7b064c0266409130087"
    $a148="ab1aaa9c1edaa8fa6a0798601d6b00ebf97a842abfdbc921ed8cc8b67f0af0cce5b46c4634c4a4b12c405e7580f028c90abf26db2f4d627e869d019330ab1534"
    $a149="ab1aaa9c1edaa8fa6a0798601d6b00ebf97a842abfdbc921ed8cc8b67f0af0cce5b46c4634c4a4b12c405e7580f028c90abf26db2f4d627e869d019330ab1534"
    $a150="eeb51705bcd2f59a48a8a0225d846977f8305de707936dd126ef18900a156aae86dc509e38612ba61eb01bbb59b80ade177201525e4209dce6b35221192fa3f0"
    $a151="eeb51705bcd2f59a48a8a0225d846977f8305de707936dd126ef18900a156aae86dc509e38612ba61eb01bbb59b80ade177201525e4209dce6b35221192fa3f0"
    $a152="0bc273efedd64db2cec38825cc3adcadf01fdfe9e897fb08a80247ab27ac9ae080b6e1135bebd1b98d4fd5c93e294367f2e598ff2f23666e24b8ca6933e83f67"
    $a153="0bc273efedd64db2cec38825cc3adcadf01fdfe9e897fb08a80247ab27ac9ae080b6e1135bebd1b98d4fd5c93e294367f2e598ff2f23666e24b8ca6933e83f67"
condition:
    ($a0 and $a1) or ($a2 and $a3) or ($a4 and $a5) or ($a6 and $a7) or ($a8 and $a9) or ($a10 and $a11) or ($a12 and $a13) or ($a14 and $a15) or ($a16 and $a17) or ($a18 and $a19) or ($a20 and $a21) or ($a22 and $a23) or ($a24 and $a25) or ($a26 and $a27) or ($a28 and $a29) or ($a30 and $a31) or ($a32 and $a33) or ($a34 and $a35) or ($a36 and $a37) or ($a38 and $a39) or ($a40 and $a41) or ($a42 and $a43) or ($a44 and $a45) or ($a46 and $a47) or ($a48 and $a49) or ($a50 and $a51) or ($a52 and $a53) or ($a54 and $a55) or ($a56 and $a57) or ($a58 and $a59) or ($a60 and $a61) or ($a62 and $a63) or ($a64 and $a65) or ($a66 and $a67) or ($a68 and $a69) or ($a70 and $a71) or ($a72 and $a73) or ($a74 and $a75) or ($a76 and $a77) or ($a78 and $a79) or ($a80 and $a81) or ($a82 and $a83) or ($a84 and $a85) or ($a86 and $a87) or ($a88 and $a89) or ($a90 and $a91) or ($a92 and $a93) or ($a94 and $a95) or ($a96 and $a97) or ($a98 and $a99) or ($a100 and $a101) or ($a102 and $a103) or ($a104 and $a105) or ($a106 and $a107) or ($a108 and $a109) or ($a110 and $a111) or ($a112 and $a113) or ($a114 and $a115) or ($a116 and $a117) or ($a118 and $a119) or ($a120 and $a121) or ($a122 and $a123) or ($a124 and $a125) or ($a126 and $a127) or ($a128 and $a129) or ($a130 and $a131) or ($a132 and $a133) or ($a134 and $a135) or ($a136 and $a137) or ($a138 and $a139) or ($a140 and $a141) or ($a142 and $a143) or ($a144 and $a145) or ($a146 and $a147) or ($a148 and $a149) or ($a150 and $a151) or ($a152 and $a153)
}
[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

30b06b49-5d01-4025-83bc-110cba1fd6b6
Propose edits, view related rules, and engage with the community through comments.
Executable code, not a declarative rule
This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.
Rejected pattern present
[[ reason ]]
What does this mean?
Format & documentation suggestions
Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.
[[ reason ]]
What do these messages mean?
[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion
