KeePass CVE-2023-32784: Detection of Processes Memory Dump – Sysdig
Tags
| attack-pattern: | Credentials - T1589.001 Proc Filesystem - T1003.007 Python - T1059.006 Tool - T1588.002 Credential Dumping - T1003 Sudo - T1169 |
Common Information
| Type | Value |
|---|---|
| UUID | 576dec8f-2fdd-49b3-bd3a-c5680242c424 |
| Fingerprint | 2da0591bcba643e8 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | June 13, 2023, midnight |
| Added to db | June 13, 2023, 5:03 p.m. |
| Last updated | Nov. 17, 2024, 6:49 p.m. |
| Headline | KeePass CVE-2023-32784: Detection of Processes Memory Dump |
| Title | KeePass CVE-2023-32784: Detection of Processes Memory Dump – Sysdig |
| Detected Hints/Tags/Attributes | 41/1/19 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://sysdig.com/blog/keepass-cve-2023-32784-detection/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 242 | ✔ | Sysdig | https://sysdig.com/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 22 | cve-2023-32784 |
|
| Details | Domain | 11 | fd.name |
|
| Details | Domain | 37 | proc.name |
|
| Details | Domain | 10 | container.info |
|
| Details | Domain | 15 | proc.pid |
|
| Details | Domain | 75 | user.name |
|
| Details | Domain | 4 | group.name |
|
| Details | Domain | 21 | container.id |
|
| Details | Domain | 24 | container.name |
|
| Details | Domain | 2 | mimipenguin.py |
|
| Details | Domain | 1 | lazagne.py |
|
| Details | File | 52 | pagefile.sys |
|
| Details | File | 22 | hiberfil.sys |
|
| Details | File | 10 | %container.inf |
|
| Details | File | 11 | proc.exe |
|
| Details | File | 9 | user.log |
|
| Details | File | 2 | mimipenguin.py |
|
| Details | File | 1 | lazagne.py |
|
| Details | MITRE ATT&CK Techniques | 3 | T1003.007 |