Rule Info
Name
MAL_Python_Backdoor_Script_Nov23
Author
X__Junior
Description
Detects a trojan (written in Python) that communicates with c2 - was seen being used by LockBit 3.0 affiliates exploiting CVE-2023-4966
Score
80
Date
2023-11-23
Minimum Yara
1.7
Rule Hash
f069d143c892ddc736c6fb845b0face2
Tags
['T1059_006', 'RANSOM', 'SCRIPT', 'DEMO', 'MAL', 'CVE_2023_4966']
Required Modules
[]
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
3
Clean (0 engines)
0
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR