General

  • Target

    emerging.rules.tar.gz

  • Size

    3.9MB

  • MD5

    e72e9039d8f1807b5741305d8faae310

  • SHA1

    b70fd36b19c188fc653117801ebaea4fccc9d322

  • SHA256

    7965493d62037e1eb29710a6f54ff314663b745c048d5c170239bbddcf12587c

  • SHA512

    0f6d37cafd4e7d8f6593ce4071151b171b4436cf7133a2b5fef0f4960231983f460615c3d586767fa51a41e80c01a22b74f37988a02a63238cbb9afc2234fd2d

  • SSDEEP

    98304:CombU7t2MRYLgS9aAc53NMAtq8KFJp/y0RsXyS9Llqbtr:CoJ7tCh9kvtq9V/yqsTCBr

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

Files

  • emerging.rules.tar.gz
    .gz
  • emerging.rules.tar
    .tar
  • rules/3coresec.rules
  • rules/BSD-License.txt
  • rules/LICENSE
  • rules/botcc.portgrouped.rules
  • rules/botcc.rules
  • rules/ciarmy.rules
  • rules/classification.config
  • rules/compromised-ips.txt
  • rules/compromised.rules
  • rules/drop.rules
  • rules/dshield.rules
  • rules/emerging-activex.rules
  • rules/emerging-adware_pup.rules
  • rules/emerging-attack_response.rules
  • rules/emerging-chat.rules
  • rules/emerging-coinminer.rules
  • rules/emerging-current_events.rules
    .pdf .jnlp polyglot
  • rules/emerging-deleted.rules
  • rules/emerging-dns.rules
  • rules/emerging-dos.rules
  • rules/emerging-exploit.rules
  • rules/emerging-exploit_kit.rules
    .jnlp .js polyglot
  • rules/emerging-ftp.rules
  • rules/emerging-games.rules
  • rules/emerging-hunting.rules
  • rules/emerging-icmp.rules
  • rules/emerging-icmp_info.rules
  • rules/emerging-imap.rules
  • rules/emerging-inappropriate.rules
  • rules/emerging-info.rules
    .pdf
  • rules/emerging-ja3.rules
  • rules/emerging-malware.rules
  • rules/emerging-misc.rules
  • rules/emerging-mobile_malware.rules
  • rules/emerging-netbios.rules
  • rules/emerging-p2p.rules
  • rules/emerging-phishing.rules
  • rules/emerging-policy.rules
  • rules/emerging-pop3.rules
  • rules/emerging-rpc.rules
  • rules/emerging-scada.rules
  • rules/emerging-scan.rules
  • rules/emerging-shellcode.rules
  • rules/emerging-smtp.rules
  • rules/emerging-snmp.rules
  • rules/emerging-sql.rules
  • rules/emerging-telnet.rules
  • rules/emerging-tftp.rules
  • rules/emerging-user_agents.rules
  • rules/emerging-voip.rules
  • rules/emerging-web_client.rules
    .js
  • rules/emerging-web_server.rules
  • rules/emerging-web_specific_apps.rules
  • rules/emerging-worm.rules
  • rules/gpl-2.0.txt
  • rules/sid-msg.map
  • rules/threatview_CS_c2.rules
  • rules/tor.rules