Rule Info
Name
BCKDR_XZUtil_Script_CVE_2024_3094_Mar24_1
Author
Florian Roth
Description
Detects make file and script contents used by the backdoored XZ library (xzutil) CVE-2024-3094.
Score
80
Date
2024-03-30
Minimum Yara
1.7
Rule Hash
b3d2a87ac4be5f4801526d6ce520b843
Tags
['SCRIPT', 'DEMO', 'CVE_2024_3094']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
18
Suspicious (< 10 engines)
2
Clean (0 engines)
2
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR