Vendor
7-Zip: Vulnerability Enables Code Execution
1 TTPA remote, anonymous attacker can exploit an unspecified vulnerability in 7-Zip to execute arbitrary code, leading to potential compromise of the system running the vulnerable software.
7-Zip Vulnerability Allows Remote Code Execution
2 rules 1 TTPA remote, anonymous attacker can exploit a vulnerability in 7-Zip to execute arbitrary program code on Windows, Linux, and macOS systems.
Multiple Vulnerabilities in 7-Zip Allow File Manipulation and Information Disclosure
2 rules 2 TTPsAn anonymous remote attacker can exploit multiple vulnerabilities in 7-Zip to manipulate files or disclose sensitive information on Windows systems.
Windows Binary Execution from Archive-Related Paths
3 rules 3 TTPs 1 CVEDetects the execution of a binary from archive-related paths within a user's Temp directory, potentially indicating attempts to bypass Mark-of-the-Web (MOTW) or exploit vulnerabilities like CVE-2025-0411.
Windows Script Execution from Archive File
2 rules 3 TTPsThis rule detects attempts to execute Jscript/Vbscript files from archive files, a common method for delivering malicious scripts by identifying unusual parent-child process relationships where scripting utilities are launched from archive programs, indicating potential exploitation.