Rule Info
Name
MAL_Backdoor_DLL_Nov23_1
Author
X__Junior
Description
Detects a backdoor DLL, that was seen being used by LockBit 3.0 affiliates exploiting CVE-2023-4966
Score
80
Date
2023-11-23
Minimum Yara
1.7
Rule Hash
219d01bddfaa203aeb43f9f229448389
Tags
['RANSOM', 'CVE_2023_4966', 'MAL', 'DEMO', 'FILE', 'EXE']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
3
Suspicious (< 10 engines)
1
Clean (0 engines)
0
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR