Threat Advisory: SolarWinds supply chain attack
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Ip Addresses - T1590.005 Kerberoasting - T1558.003 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Saml Tokens - T1606.002 Server - T1583.004 Server - T1584.004 Software - T1592.002 System Services - T1569 Tool - T1588.002 Kerberoasting - T1208
Show in Graph
Common Information
Type Value
UUID 3cc0a35b-10ab-4e1c-af20-9010b6f40638
Fingerprint bd85b8104a070600
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 14, 2020, 5:20 p.m.
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Nov. 12, 2024, 11:53 a.m.
Headline Vulnerability Information
Title Threat Advisory: SolarWinds supply chain attack
Detected Hints/Tags/Attributes 47/2/5
Source URLs
Redirection Url
Details Source https://blog.talosintelligence.com/2020/12/solarwinds-supplychain-coverage.html
Details Source https://blog.talosintelligence.com/2020/12/solarwinds-supplychain-coverage.html#more
URL Provider
Details Provider Source level domain
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 50 
avsvmcloud.com
Details Domain 1 
rgkte-hdvj.cc
Details File 29 
orion.core
Details File 26 
businesslayer.dll
Details File 3 
c:\windows\syswow64\netsetupsvc.dll