Rule Info
Name
SUSP_Encoded_Follina_CVE_2022_30190_Payloads_Jun22
Author
Florian Roth
Description
Detects encoded Follona payloads
Score
70
Reference
Internal Research - Permutator
Date
2022-06-07
Minimum Yara
1.7
Rule Hash
09c7246f290dd481390863d771b70e00
Tags
['CVE_2022_30190', 'T1027', 'SCRIPT', 'SUSP']
Required Modules
[]
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
2
Suspicious (< 10 engines)
0
Clean (0 engines)
1
Rule Matches
Timestamp
Positives
Total
Hash
VT
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR