Rule Info
Name
MAL_Backdoor_DLL_Nov23_1
Author
X__Junior
Description
Detects a backdoor DLL, that was seen being used by LockBit 3.0 affiliates exploiting CVE-2023-4966
Score
80
Date
2023-11-23
Minimum Yara
3.5.0
Rule Hash
219d01bddfaa203aeb43f9f229448389
Tags
['CVE_2023_4966', 'RANSOM', 'EXE', 'FILE', 'DEMO', 'MAL']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
5
Suspicious (< 10 engines)
2
Clean (0 engines)
0
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR