EXPL_Follina_CVE_2022_30190_Msdt_MSProtocolURI_May22

Rule Info

Av Ratio
26.72
Score
80
Name
EXPL_Follina_CVE_2022_30190_Msdt_MSProtocolURI_May22
Minimum Yara
2.2.0
Required Modules
[]
Description
Detects the malicious usage of the ms-msdt URI as seen in CVE-2022-30190
Modified
2022-06-10
Date
2022-05-30
Tags
['EXPLOIT', 'CVE_2022_30190', 'DEMO']
Rule Hash
5dcb9f64788f1ae3f16a4720a7bb41d4
Author
Tobias Michalski, Christian Burkard

Antivirus Verdicts

Rating
Number of Samples
Malicious (>= 10 engines)
84
Suspicious (< 10 engines)
28
Clean (0 engines)
3

Rule Matches

Positives
Hash
Total
Timestamp
VT
22
6789fab6790ded2ca9f2fd9ccc810a6998d910903c7e919bcd4453b1d8a4f996
56
2022-06-17 01:16:50
24
901ac450eb02a63a6daba010a564ba9a4ae042c342d0e4e4969840059b185bda
56
2022-06-16 16:18:27
27
50eb0ffb78908931ee490fa8bd772301efbf64cc61499d625f273bb7fd6e194f
55
2022-06-16 16:10:09
14
37b40d799364a8c857e88b64d1ccb2e210c4348c5cb00748041423ffc8e46053
54
2022-06-16 15:53:39
26
32ec74ccefc7d7feb5c8817097652fc6014c6217f5b6a2695a95e680d6958153
56
2022-06-16 15:06:57
23
7e3247883be19a94f3c93bdf6f94a05bf03a00274f48908314e569204af7f11d
55
2022-06-16 13:52:45
23
82670522b096c1eadf946e3782e562e86d09b3efc2575a06761cf035d8aec2bd
56
2022-06-16 12:51:42
23
73705716172ac96b070b00d6fb09d58f44275259af893779beea6ea8fc7ae907
56
2022-06-16 11:08:20
24
d193880450e2fc96229484ae38a2e6e41c91716d2746432ea782572a1e27afdd
56
2022-06-16 05:18:48
16
c6427f7610368fe0118764b71c12661b70bcc0e282f4187dbb493849b9f6a4fe
52
2022-06-15 20:40:10
23
fd4ee34a813f829594cc2dc760afada467c1320621e66491517e4bf95a0ace06
56
2022-06-15 16:55:56
26
66462e2e98fa2eec11fc6fedbf7cdb1875d59f8ed300290493d0be1f12233bcb
56
2022-06-15 16:30:19
24
56abf7aa8a2a74e7db6bdd73ab496d896d07da04db9c87bc8c45b4eef6b9fafd
56
2022-06-15 16:27:06
25
dd2b0c59ad2b28643a627c2544fc4a6cbc499aab6b340d2e76eaeb0bafe5adb0
58
2022-06-15 09:55:54
24
26a0d403343757dfe73f9c3203a2e401db3febfd37dc6c0bd7739c528dfc88bf
58
2022-06-15 09:54:29
23
e78dbcf9eb548872f3da21953f67d02a0d157dd12a0194a044a07eea47278304
56
2022-06-15 09:14:51
21
a190903509ff8827a3c95c3a790fefffdcaeadc6dc6dfd9656d83f184b0b9760
59
2022-06-15 08:50:59
19
13b9481bff8b169bb175bf97064f52cbbffe1561ba8641dda3551ea5781e547c
56
2022-06-15 08:12:59
24
2cdd875b905065d9e35e323eb56f8f5b1dca141be94da35f79daf833d88728a7
56
2022-06-15 07:18:30
24
c61fe40f46226d24f0f17c46acc4db6a0091c68abc6a3d995b3f6df1bbfcbb1e
56
2022-06-15 04:16:55
23
ad32d583c227a059eed515ed617c473ca8697d6856276c390b0299b573178966
56
2022-06-15 04:10:55
25
e7886967c692329f846ec87e8c6db4c6d7eca61a2f87563dcb398be0ce3a1d58
56
2022-06-13 17:18:54
14
b1153487214b3fe9b2b41341ee8fcf54b2b8a478639e2d36687fa115704882c5
55
2022-06-11 01:53:32
19
2846446a931589d5e0c2cee034adcb959fb0e8a5359447345dc2672431ad5949
56
2022-06-11 00:08:15
20
4c14af0228b5137b32089cd85a461f06d72b98c263fc0875bff0a5987633df3c
56
2022-06-11 00:03:56
23
ca7d181a7146226a24e7e3c2f80720b9ec9bb182dafb27053fc286cd4f27f953
56
2022-06-10 23:59:20
20
973933baf8a241dca0ba0f6a8caa38033be81e55ec5ab6b439bff64ecae2fc1c
55
2022-06-10 23:56:58
21
8e0f87c8efefaed76b706d6b72e07ec75566b6dcee7622e55a2e2a5339f200c8
55
2022-06-10 23:27:20
22
6b91b022e1045598467214bd95333cd40ed3bb6d70a441e85c2e773cc92a45c2
56
2022-06-10 18:55:24
25
c901bad1777ca42bea4f6d6f4673cd2bb1452ae0273c8ab10450000fe0e7cd8d
56
2022-06-10 14:25:22
18
5405b2465c1a44cd9d7f651fdb5846c2114f2ff51d44fd3043e70150bacdd4ca
56
2022-06-10 05:23:51
23
99e591560b8f2ca0872a65e9c9728a1b5459b9a9c0eadd49827fef0239981929
55
2022-06-10 01:51:39
20
b3281ee94db3b971936a861c0c561065cd7eaa89062e807f43496ca765981d71
56
2022-06-09 18:06:41
16
25b3f6e9d85fcaa13ebdf198002a9f6ef5843a380b39f4d87ab33ff234411ac7
56
2022-06-09 11:41:16
21
87e5a464de2f85a500f1b8d1028f5742f0903d9c0c3387dc572aac8cf9027bcc
56
2022-06-09 07:09:46
15
b573227f7c633ffa55fe093d2c4061f8a5fa1a02b893b765cac0af355263d95b
56
2022-06-08 22:19:31
22
155fe98f73d29e639c01c01126281493d3f46716059c8b52ba70b65a1fba91ae
55
2022-06-08 20:38:45
21
ce7624899c20f14304260dc74559207f4dbd903a95d3e3966d1e345b0d45aeaa
56
2022-06-08 19:42:44
24
529f707c4023542fef2b9c5737ecf643b40cdef6e2b0fb6ab7788f7896afa7f5
56
2022-06-08 18:08:26
20
30fcfa7f6292d3d62578f625f181be62a222b0e6ea20a469e27fc1b23b94dbab
55
2022-06-08 17:20:52
13
7a94b555468972fe03908c56be51d18061c06c06e99489cb58da5813c3662e30
56
2022-06-08 17:12:08
22
08e69b8d1b779c5981e8d284debb90ae039bea475a938de25ace539dc26f1fed
54
2022-06-08 14:03:32
23
9dfc54450552ad0cbe930716b0d2c915544378d30d6d22f463e2dad3ceee1fcc
56
2022-06-08 14:01:03
23
cdec208ec12fa58c122db1887abb7f58c7998a9ba6eeebffc501e11de3975215
56
2022-06-08 12:02:11
21
9ebc6bc23ecd75e320b24c9d6b7c8738ed85b4538751ebd508d6fb914ac27fb1
56
2022-06-08 12:02:08
19
bd737f105f39f5e824273b8423f0988c1499cabd040e65035a301ab853eaf345
56
2022-06-08 10:23:01
22
dc009a09a03b95862c3eaa5ef6bc171325bc3f8e9da806a1508ac786f54f668f
55
2022-06-07 23:06:25
20
e3ba1c45f9dd1f432138654b5f19cf89c55e07219b88aa7628334d38bb036433
56
2022-06-07 19:56:11
15
7ae568ca3ac2da26af29e74661180dad17e4cee55d7e817f757f3196a054d8f4
54
2022-06-07 19:03:09
20
a4e3fb0c055d523e26440e56b2dc015672c4e1e44b35c4a78e87abb751494964
56
2022-06-07 18:13:16
21
3b25e5d0e26dc45096399399c661fbf92e027b40c8f333c8a106c49223aaeb2e
56
2022-06-07 15:08:23
20
cee035a6cb3d2e6d3680e2413beaaf8b514b952086a4637a90c113884f0bc847
54
2022-06-07 05:01:37
20
eefa6d4aa3e729adba1688cd737f78d5bdc7b62447165b5255541a962a246ddc
57
2022-06-07 05:00:19
11
ae2f202b69d15676baa77c4f1f16dda1d1f524172f99b06fe5a2dbb5f0f599e2
55
2022-06-07 03:28:58
11
d5ec2d860db9d32c23af6b1f85ed522b7b6468b63358abb526a0725426025f0f
56
2022-06-07 00:44:00
12
537217e86cab65614f583c8fe3f1bcbcdbefec640cad055a8292126f5f0efd77
56
2022-06-07 00:41:47
18
69caa0067a80c69fed754a6af6c023ee19a89e3a2be1bc6e41cd9f395b5cb31d
55
2022-06-06 20:15:41
17
0c8cbc95fcf951b5688ad701d11a6ab7808dc1bfe1888afb8dd7aaae81c14cbe
55
2022-06-06 20:14:27
14
c0c9392b9334eea2cbe73485ee9c63f9e693908c3eb87f77b94a69eca394895d
56
2022-06-06 05:30:10
12
068d800c7cfa14231127ef8976ec98ebb407276768487fd111639265ce46fa5c
55
2022-06-05 17:04:03
17
4bbf61fb4c7f90200d5daea7a83638f6f3b8b72cff68aedb9053fcff4918ac70
56
2022-06-05 15:13:48
19
01a6368d9dfd750378b5909f1bf1f9bd79ff9e9601f25b4b67b27da8495577d3
56
2022-06-05 15:11:36
17
29ae320f6fa72309f4440f3c32204dade0ae801f91fd5b8448236535cc0bddf3
56
2022-06-05 13:02:21
12
0ebba718bb5d6c66d0153562862d9490e44f2cc732c3573d2bd72725cb7dcb68
56
2022-06-05 12:49:40
12
38c02b505e6d6cf3c180c257892549ec78bfea5cce6f92a250deab8fb2b4bc5a
55
2022-06-05 12:46:29
16
ee73c63d169a072919c2f175b27526b0a0a184bb534f78c8119c2be8306070e3
56
2022-06-05 12:38:01
17
f83af25caa955f13be4eca9fb49b124560f12bdbbe2d6cd64be1cdea24b1a673
56
2022-06-05 12:35:55
16
6dceaa1743e6d728aa5374c47e6142dcda168d2b08e10606accac6eb0e9b54ad
56
2022-06-05 12:31:42
18
aac307d879999bd6b56ca128f1f35b333fecd58dae54058aa73e00ee7687ff46
56
2022-06-05 12:28:35
17
be9511752ac507ffcfb37aae843445c52aec4bbaf0954652d3875095a651848c
55
2022-06-05 12:17:30
16
1f63e858b45dc8dfc3befdcf8d743ed36ca43acc31a9b5b6646469c317b26729
56
2022-06-05 07:13:44
19
e302ff011bbab714ee7bc4078bc8f8ac4fea0a8c7895feac55a04ac3f500ad1b
55
2022-06-05 00:39:11
11
c858774119e4bf466a3b001a1cb8a846ebe4b82327b2b3376d55749f2bbd9edd
56
2022-06-04 14:53:15
20
386ac13cdb3b309b528c6ce39be6b712b43f8b8922cd19e817ebbe70b67133f1
56
2022-06-03 23:30:22
16
dba860617762bc713771de351026eb683546b37489fa0359064948f263438030
54
2022-06-03 18:41:57
16
555536b16091930dc53a5d6e66c40e43a440caf9de7a620383fbb13ad0144a75
57
2022-06-03 18:10:22
18
d41220ea115cabb8f22d8f12c8bbc472494fedeaaae5789be7b6192438548143
56
2022-06-03 18:08:00
9
4ec47c2389c7a2deefa046dab49af519d51bac5155ba7a80a6ddcbbc6985676b
50
2022-06-03 13:37:30
18
5385a798d136365b644199359dc2662de3b0d6c5adc09e4cf9cada074e8a9338
56
2022-06-03 12:15:40
15
b1ca4fb02a9b9675ad13d6a0d5c33a0aed6602934e347ddce949a2a1bcc0aab2
56
2022-06-03 10:39:44
14
f2d96d53f9cfa7c9b0fa4c0ec135cf4b3eabef78efc9799c5fd282796e64c4ef
56
2022-06-03 09:02:24
15
8918ede0a38d40ee0b89028819dcaac6bb73d2280ad88ea2e1d0a42fd7101aa6
56
2022-06-03 08:02:02
17
57e73e139dff99884e9287266ca4caf826e7ec3b5e93f737198c6bf970b982f8
57
2022-06-03 07:34:33
17
6b817259bac271509241f40696a886584985b078f45923c50a056765f44d65b5
57
2022-06-03 07:05:47
8
983b6726492937b4ee915c9d98b9665ae86ace168eb903714a0622e5c014f7fd
57
2022-06-02 15:54:29
4
acbf968c3919edfe33f6901135df0ee26d171444813f1f29394563fdac902c40
57
2022-06-02 15:30:19
0
800a769983c44b7a6d21c746ffe1c5108b0e73d1a2a35a1691a9126eacb26bbe
55
2022-06-02 12:07:01
2
2435f5bf0ecf3879794af79674320723316bc83ba910705d1ee7af2d6d818fba
57
2022-06-02 07:19:04
0
a600bcaa8701a3c32c42604d25d4ead9d74b9c2fa5aa34755bf5ffa0a32516dc
57
2022-06-02 03:23:52
3
421ad75fd3084133d2ddb5b74bd385b55b9fb301f0071042b19b46d59e871c31
57
2022-06-02 02:23:31
6
f1f6359ece584a4fb47e636524b73197ce60687d6de70babc100073b587fec14
57
2022-06-01 23:06:26
5
4f643bf57abe70e3c4ed64f05167da5d6c35f2dac1d7fda78523ab231f903575
57
2022-06-01 19:08:21
4
f58352fa86d07b4a67d5445768b2668e7c114896b904e94b1c8eef23e21d8fe8
57
2022-06-01 17:16:49
5
a26d98ad0d2099d2303dbac9b2bdd27be049e6bf62acfd0156379cf43de76d8f
56
2022-06-01 16:33:43
3
9e74d2565a83878d2ec756837890a2e73fbbc73f8289ccda2b605ca799b46e2b
56
2022-06-01 16:28:14
5
910a64dbaaa3c150952739f682ba7076cea512297ed9f67bad33784489e719dc
56
2022-06-01 15:59:39
7
2ae16b32705f145712aad85b551f1d00ebc6954840f7945ccf850091421bfce6
57
2022-06-01 15:55:29
6
c62d311459b8a723c8ab5e331bd1b93bf612cae33c95ab132074f4d90e8bbe53
56
2022-06-01 15:53:01
7
ce5671c292d834b04e0b27276c9b18c9f21da9d043b16ec2b3292ea5ff1b671c
56
2022-06-01 15:45:11
4
f814fbfacf5335433a0bbea9c2d04ed3bdb8a80afbc889c67db12340ec1b8918
57
2022-06-01 11:18:26
18
4d5d012c118933031829454f0c3b475f90618454a002d49ea6a8b98f8c6f7650
60
2022-06-01 10:22:50
1
91aca063014853d5ca7015bf04b22b31f56d350cbc81ffb2cf34575bb2f75c30
56
2022-06-01 00:00:55
2
155d25deccca471d170b403967ba11f9c24a080666260ed43318c7ce9738d19d
57
2022-05-31 23:59:45
4
2af51b2cd536a6cde1616d38ca0d44fef8ff25b683a3ee77a7be0d1540685872
56
2022-05-31 21:07:43
1
f6d923848870474d5253248449f705c3a544fc7d960bc526519943863ca77263
57
2022-05-31 14:43:48
3
764a57c926711e448e68917e7db5caba988d3cdbc656b00cd3a6e88922c63837
57
2022-05-31 12:01:13
3
fc2887c34e9bd5b5dc61ce389d0b28c25a57e9d2c8bc885a4b8b9527ce8dc7f7
56
2022-05-31 12:00:31
1
e67f1397c7cacaad900bcfb69f4ac48b8f268754c9d7a8d659da33022696f527
56
2022-05-31 10:29:53
1
1eedbbfd5b379e84f14fbd2b6e66e3f926ce293175445eb19bb661f78abd7a26
56
2022-05-31 10:00:28
2
8d68fc5c45cdfd449252b1e3e2ec8a1e35e00c83532628102e5f699a1190d101
57
2022-05-31 08:50:51
3
765ba2fbddfbb58c07cf49455f75e7f7ac0e93b1a3219026a851e0d9d7f0d97d
57
2022-05-31 08:49:45
1
02687e7a146f739bddda7035b1093d5d02b18dcca06982cb72392a804171cbec
56
2022-05-31 04:25:52
1
625871a9194bf7d35d32282b86b226efb2aeaac5ca9b0b74490bed53bc879e79
57
2022-05-31 00:16:00
0
3bf2bed980adca2fb8035c308241659346a37d70d53ed549d1dfd5a8e03a2c64
56
2022-05-30 18:41:50
3
8e986c906d0c6213f80d0224833913fa14bc4c15c047766a62f6329bfc0639bd
56
2022-05-30 18:37:24

Rule Matches per Month (last 24 months)