Rule Info
Name
EXPL_Exchange_ProxyNotShell_Patterns_CVE_2022_41040_Oct22_1
Author
Florian Roth
Description
Detects successful ProxyNotShell exploitation attempts in log files (attempt to identify the attack before the official release of detailed information)
Score
75
Date
2022-10-11
Modified
2023-03-15
Minimum Yara
2.2.0
Rule Hash
09b56adb739a436a322ff2e956a17e07
Tags
['EXPLOIT', 'CVE_2022_41040', 'SCRIPT', 'DEMO']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
3
Clean (0 engines)
6
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR