Skip to content
yararules.org
Menu

YARA rules tagged CVE_2024_1709

5 rules carry the tag “CVE_2024_1709”.

  • SIGNATURE_BASE_MAL_RANSOM_Lockbit_Indicators_Feb24

    Detects Lockbit ransomware samples mentioned in a HuntressLabs report on the exploitation of ScreenConnect vulnerability CVE-2024-1708 and CVE-2024-1709

    MalwareSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-02-23
  • SIGNATURE_BASE_MAL_Beacon_Unknown_Feb24_1

    Detects malware samples mentioned in a HuntressLabs report on the exploitation of ScreenConnect vulnerability CVE-2024-1708 and CVE-2024-1709

    MalwareSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-02-23
  • SIGNATURE_BASE_MAL_CS_Loader_Feb24_1

    Detects Cobalt Strike malware samples mentioned in a HuntressLabs report on the exploitation of ScreenConnect vulnerability CVE-2024-1708 and CVE-2024-1709

    MalwareSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-02-23
  • SIGNATURE_BASE_SUSP_MAL_Signingcert_Feb24_1

    Detects PE files signed with a certificate used to sign malware samples mentioned in a HuntressLabs report on the exploitation of ScreenConnect vulnerability CVE-2024-1708 and CVE-2024-1709

    Suspicious / huntingSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-02-23
  • SIGNATURE_BASE_MAL_MSI_Mpyutils_Feb24_1

    Detects malicious MSI package mentioned in a HuntressLabs report on the exploitation of ScreenConnect vulnerability CVE-2024-1708 and CVE-2024-1709

    MalwareSignature Base (Florian Roth / Nextron)· Florian Roth· 2024-02-23