Rule Info
Name
MAL_DLL_Stealer_Nov23
Author
X__Junior
Description
Detects a DLL that steals authentication credentials - was seen being used by LockBit 3.0 affiliates exploiting CVE-2023-4966
Score
80
Date
2023-11-23
Minimum Yara
1.7
Rule Hash
f63626023dc11fe757bb483146381713
Tags
['FILE', 'RANSOM', 'DEMO', 'EXE', 'MAL', 'CVE_2023_4966']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
1
Suspicious (< 10 engines)
0
Clean (0 engines)
0
Rule Matches
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR