警惕：勒索软件正通过SQL Server 弱口令攻击服务器
Tags
attack-pattern: Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 27c9625c-dd63-409d-8f67-fba5b2eb4587
Fingerprint 934cba56fddb5fe7
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 21, 2022, midnight
Added to db June 5, 2023, 2:23 p.m.
Last updated Sept. 5, 2024, 12:09 a.m.
Headline 警惕：勒索软件正通过SQL Server 弱口令攻击服务器
Title 警惕：勒索软件正通过SQL Server 弱口令攻击服务器
Detected Hints/Tags/Attributes 2/1/2
Source URLs
Redirection Url
Details Source https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500814&idx=1&sn=58c1726c91544f7ea6121f7dd35b4435&chksm=ec9f1d7ddbe8946bc8e7ebd491c9cb8ae1445e2977b0aaca93a05fd0fb8cce6d7e3d7002c1ed&scene=58&subscene=0#rd
URL Provider
Details Provider Source level domain
Details qq.com mp.weixin.qq.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 262 ✔ 腾讯安全威胁情报中心 https://wechat2rss.xlab.app/feed/034265b14906a59ef7cf1fcbd56699b54a696094.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 4 
svcservice.exe
Details File 1 
再单独释放出一个bat和一个svchost.exe