MalwareBazaar Database
This page shows some basic information the YARA rule Entroprism_AIP_AIP_20261104_D033 including corresponding malware samples.
Database Entry
| YARA Rule: | Entroprism_AIP_AIP_20261104_D033 |
|---|---|
| Author: | Entroprism (Beijing Yijun Foreign Trade Co., Ltd.) |
| Description: | Entroprism AIP defensive validation: driveby.exploit_kit -> payload.transform -> persist.schtasks -> evasion.etw_disable -> c2.icmp |
| Firstseen: | 2026-11-03 06:43:36 UTC |
| Lastseen: | 2026-11-04 15:57:49 UTC |
| Sightings: | 192 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|