MalwareBazaar Database
This page shows some basic information the YARA rule SUSP_JAVA_Class_Skidfuscator_Predicate_Flow_Oct26 including corresponding malware samples.
Database Entry
| YARA Rule: | SUSP_JAVA_Class_Skidfuscator_Predicate_Flow_Oct26 |
|---|---|
| Author: | rc4 |
| Description: | Detects Java class files obfuscated with Skidfuscator based on its opaque predicate seed chain (ldc/ldc_w int; iload p; ixor; istore p) and seed mixing (ixor; ixor; istore) |
| Firstseen: | 2026-10-09 21:24:12 UTC |
| Lastseen: | 2026-11-01 16:28:18 UTC |
| Sightings: | 6 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|