Rule Info
Name
SUSP_LNK_Follina_Jun22
Author
Paul Hager
Description
Detects LNK files with suspicious Follina / CVE-2022-30190 strings
Score
75
Date
2022-06-02
Minimum Yara
1.7
Rule Hash
4185f9d4af993b73a4cf905a71719db7
Tags
['T1547_009', 'CVE_2022_30190', 'DEMO', 'SUSP', 'FILE', 'T1210']
Required Modules
[]
Virustotal Matches
Antivirus Verdicts
Rating
Number of Samples
Malicious (>= 10 engines)
0
Suspicious (< 10 engines)
1
Clean (0 engines)
0
Rule Matches
Rule Matches per Month (last 24 months)
Scan your endpoints, forensic images or collected files with our portable scanner THOR