Disable DDEAUTO for Outlook, Word, OneNote, and Excel versions 2010, 2013, 2016
Tags
| attack-pattern: | Data Dynamic Data Exchange - T1559.002 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Dynamic Data Exchange - T1173 |
Common Information
| Type | Value |
|---|---|
| UUID | 5b032391-155f-4f30-922f-36d27d471c46 |
| Fingerprint | 3c37d855fd27348f |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Oct. 20, 2017, midnight |
| Added to db | Sept. 26, 2022, 9:32 a.m. |
| Last updated | Sept. 1, 2024, 5:26 a.m. |
| Headline | wdormann/disable_ddeauto.reg |
| Title | Disable DDEAUTO for Outlook, Word, OneNote, and Excel versions 2010, 2013, 2016 |
| Detected Hints/Tags/Attributes | 21/1/13 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://gist.github.com/wdormann/732bb88d9b5dd5a66c9f1e1498f31a1b |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | File | 1 | disable_ddeauto.reg |
|
| Details | Url | 1 | https://blogs.technet.microsoft.com/mmpc/2017/10/23/windows-defender-exploit-guard-reduce-the-attack-surface-against-next-generation-malware |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Word\Options |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Options |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Options\WordMail |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Word\Options\WordMail |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Options\WordMail |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\OneNote\Options |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\OneNote\Options |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Options |
|
| Details | Windows Registry Key | 2 | HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Excel\Options |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Options |