Nextron YARA rules Generic JSP webshell with base64 encoded payload
Verdictmalware
Severitymedium
Public Nextron YARA rules
Matched indicatorb.bostonglobemedia.com/plugin/plugin/0af4fe506e8786d81af9b76a2aff75f0
WEBSITE ANALYSIS REPORT
http://email.mail.instatrac.com/c/eJxczLFOxDAMANCvSRZ0VWo7bTNkuKUSAx_hOA4N9FrUREjw9QxsNz_p5Rjc7OcwWY3jPPsFEcJot8iKzKVIyCFN6sskwjouDpGpCJCtkcn5VCSNKVNJs1-CkhImX3JCr4sh9-DW6tFq1ms4tNs9br1_NYN3A6uB9ckNrHz1KrsaWNEhoTOwyl7l017x42xa6sGDnEevhtzvz_vWBzkftsc3bu31fzJ4fwEH083RbXT2O8JfAAAA__8s8kbx
public
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts