10 Years of DLL Hijacking, and What We Can Do to Prevent 10 More - Check Point Research
Tags
| attack-pattern: | Data Model Dll Search Order Hijacking - T1574.001 Dll Side-Loading - T1574.002 Software - T1592.002 Tool - T1588.002 Dll Search Order Hijacking - T1038 Dll Side-Loading - T1073 |
Common Information
| Type | Value |
|---|---|
| UUID | 149ca95c-3af5-45a9-a442-dcce483466e5 |
| Fingerprint | 250e131ba82d5e6c |
| Analysis status | DONE |
| Considered CTI value | 1 |
| Text language | |
| Published | Sept. 25, 2024, 12:57 p.m. |
| Added to db | Sept. 25, 2024, 3:43 p.m. |
| Last updated | Nov. 14, 2024, 11:09 a.m. |
| Headline | 10 Years of DLL Hijacking, and What We Can Do to Prevent 10 More |
| Title | 10 Years of DLL Hijacking, and What We Can Do to Prevent 10 More - Check Point Research |
| Detected Hints/Tags/Attributes | 72/1/11 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 204 | ✔ | Check Point Research | https://research.checkpoint.com/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 176 | cve-2012-0158 |
|
| Details | File | 5 | java-rmi.exe |
|
| Details | File | 11 | dbgeng.dll |
|
| Details | File | 19 | jli.dll |
|
| Details | File | 9 | lbtserv.dll |
|
| Details | File | 89 | version.dll |
|
| Details | File | 2 | some.dll |
|
| Details | File | 10 | c:\windows\system32\ws2_32.dll |
|
| Details | File | 4 | sample.dll |
|
| Details | File | 2 | frontloaded.exe |
|
| Details | File | 3 | cert.pub |