MalwareBazaar Database
This page shows some basic information the YARA rule Entroprism_AIP_FREE_20261120_D017 including corresponding malware samples.
Database Entry
| YARA Rule: | Entroprism_AIP_FREE_20261120_D017 |
|---|---|
| Author: | Entroprism (Beijing Yijun Foreign Trade Co., Ltd.) |
| Description: | Entroprism AIP defensive validation: bruteforce.ssh -> payload.transform -> persist.cron -> evasion.pack -> c2.http_beacon |
| Firstseen: | 2026-11-03 05:39:04 UTC |
| Lastseen: | 2026-11-03 19:17:54 UTC |
| Sightings: | 41 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|