Exploiting .NET Managed DCOM
Tags
cmtmf-attack-pattern: Native Code
attack-pattern: Data Component Object Model - T1559.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Powershell - T1086 Windows Management Instrumentation - T1047
Show in Graph
Common Information
Type Value
UUID 5147a86c-c87c-4a24-b55f-a55562a02159
Fingerprint e479c9177da30304
Analysis status DONE
Considered CTI value 2
Text language
Published April 28, 2017, 9:23 a.m.
Added to db Jan. 18, 2023, 9:44 p.m.
Last updated Nov. 18, 2024, 8:35 a.m.
Headline Project Zero
Title Exploiting .NET Managed DCOM
Detected Hints/Tags/Attributes 70/2/16
Source URLs
Redirection Url
Details Source https://googleprojectzero.blogspot.com/2017/04/exploiting-net-managed-dcom.html
URL Provider
Details Provider Source level domain
Details blogspot.com googleprojectzero.blogspot.com
Attributes
Details Type #Events CTI Value
Details CVE 3 
cve-2014-0257
Details CVE 1 
cve-2014-4073
Details CVE 2 
cve-2017-7293
Details Domain 107 
system.management
Details Domain 1 
dc.network
Details Domain 5 
string.compare
Details Domain 1 
enumerable.zip
Details File 1 
reg.reg
Details File 41 
system.obj
Details File 1 
badgers.dll
Details File 1 
assemblies.txt
Details File 312 
calc.exe
Details File 1 
enumerable.zip
Details IPv4 1 
192.168.56.50
Details IPv4 7 
192.168.56.102
Details IPv4 29 
4.0.0.0