SIGNATURE_BASE_MAL_Litellm_Supplychain_Mar26

rule SIGNATURE_BASE_MAL_Litellm_Supplychain_Mar26 : FILE
{
	meta:
		description = "Detects malicious indicators used in LiteLLM supply chain attack"
		author = "Marius Benthin"
		id = "a6ea2621-af92-591c-89e1-5be6efe9f6b8"
		date = "2026-03-28"
		modified = "2026-05-15"
		reference = "https://github.com/BerriAI/litellm/issues/24512"
		source_url = "https://github.com/Neo23x0/signature-base/blob/94a1c48d7ab499879287ff611dfe7f9c56376030/yara/mal_teampcp_mar26.yar#L1-L17"
		license_url = "https://github.com/Neo23x0/signature-base/blob/94a1c48d7ab499879287ff611dfe7f9c56376030/LICENSE"
		hash = "71e35aef03099cd1f2d6446734273025a163597de93912df321ef118bf135238"
		logic_hash = "4bf25020a0daebda3731a23e6a4191e0d83ff746a2482b6e0394d4c6a8f5c4b0"
		score = 80
		quality = 85
		tags = "FILE"

	strings:
		$s1 = "exec(base64.b64decode("
		$s2 = "litellm." base64
		$s3 = "subprocess.DEVNULL"

	condition:
		filesize < 500KB and all of them
}