MalwareBazaar Database

This page shows some basic information the YARA rule SUSP_JAVA_JAR_Skidfuscator_Random_Runtime_Path_Oct26 including corresponding malware samples.

Database Entry


YARA Rule:SUSP_JAVA_JAR_Skidfuscator_Random_Runtime_Path_Oct26
Author:rc4
Description:Detects JAR files containing a class at a randomized 16+16 lowercase letter path as used for the runtime class of Skidfuscator 2.0.x community builds (heuristic, lower confidence)
Firstseen:2026-10-09 21:23:33 UTC
Lastseen:2026-10-12 18:38:48 UTC
Sightings:4

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter