MalwareBazaar Database
This page shows some basic information the YARA rule Entroprism_AIP_Linux_Removable_Beacon including corresponding malware samples.
Database Entry
| YARA Rule: | Entroprism_AIP_Linux_Removable_Beacon |
|---|---|
| Author: | Entroprism (Beijing Yijun Foreign Trade Co., Ltd.) |
| Description: | Detects packed Linux ELF payload with HTTP C2 beacon delivered via removable media (Entroprism AIP defensive validation) |
| Firstseen: | 2026-11-03 09:36:14 UTC |
| Lastseen: | 2026-11-04 05:43:04 UTC |
| Sightings: | 19 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|