Getting Started with WMI Weaponization - Part 5
Common Information
Type Value
UUID 2af1e080-a70a-4ea6-9308-cb90c5f13da4
Fingerprint 5b2c564d61d3de04
Analysis status DONE
Considered CTI value 0
Text language
Published April 18, 2017, 7 a.m.
Added to db Jan. 18, 2023, 8:37 p.m.
Last updated Nov. 18, 2024, 1:38 a.m.
Headline Getting Started with WMI Weaponization – Part 5
Title Getting Started with WMI Weaponization - Part 5
Detected Hints/Tags/Attributes 17/1/3
Attributes
Details Type #Events CTI Value
Details File 1209
powershell.exe
Details File 3
c:\text.txt
Details File 4
c:\evil.exe