MalwareBazaar Database
This page shows some basic information the YARA rule LIN_Dropper_Unknown_Zsh_AES_SplitCmd including corresponding malware samples.
Database Entry
| YARA Rule: | LIN_Dropper_Unknown_Zsh_AES_SplitCmd |
|---|---|
| Author: | Marjoriefort |
| Description: | Dropper zsh : commandes eclatees en variables (md5/xxd/openssl/gunzip) + payload AES-128-CTR decode puis execute via /bin/zsh |
| Firstseen: | 2026-10-11 18:32:42 UTC |
| Lastseen: | 2026-10-16 16:26:21 UTC |
| Sightings: | 3 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|