Python/CVE_2022_35405.G!tr

description-logoAnalysis

Python/CVE_2022_35405.G!tr is a generic detection for a Python script trojan/exploit.
This malware has been associated with the following third party article/advisory.

https://nvd.nist.gov/vuln/detail/CVE-2022-35405
The correlation has been established due to a database near/exact match on one of the sample/IOC/file hash indicated in the mentioned resource.
  • Following are some of the near/exact IOCs/file hash associated with this detection:
    • Md5: f7557966a926aa2832a362cd2abf3ccf
      Sha256: ed156b4196a5a0b6a6fd8e554208ebb6ce6da15417fc57d837d2b7e65c35c174

  • recommended-action-logoRecommended Action

    • Make sure that your FortiGate/FortiClient system is using the latest AV database.
    • Quarantine/delete files that are detected and replace infected files with clean backup copies.

    Telemetry logoTelemetry

    Detection Availability

    FortiGate
    Extended
    FortiClient
    FortiMail
    FortiSandbox
    FortiWeb
    Web Application Firewall
    FortiIsolator
    FortiDeceptor
    FortiEDR

    Version Updates

    Date Version Detail
    2022-09-23 90.06256