MalwareBazaar Database
This page shows some basic information the YARA rule Entroprism_AIP_AIP_20261104_D166 including corresponding malware samples.
Database Entry
| YARA Rule: | Entroprism_AIP_AIP_20261104_D166 |
|---|---|
| Author: | Entroprism (Beijing Yijun Foreign Trade Co., Ltd.) |
| Description: | Entroprism AIP defensive validation: bruteforce.rdp -> payload.transform -> persist.startup_folder -> inject.apc -> c2.http_beacon |
| Firstseen: | 2026-11-03 06:43:36 UTC |
| Lastseen: | 2026-11-04 15:57:49 UTC |
| Sightings: | 192 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|