CVE-2023-28252在野提权漏洞样本分析
Tags
Show in Graph
Common Information
Type Value
UUID 5e6abed1-5ee5-4842-90fb-6cadfe382b05
Fingerprint 6923dc6d5f08a03
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 21, 2022, midnight
Added to db June 5, 2023, 2:22 p.m.
Last updated Nov. 15, 2024, 4:40 p.m.
Headline CVE-2023-28252在野提权漏洞样本分析
Title CVE-2023-28252在野提权漏洞样本分析
Detected Hints/Tags/Attributes 10/0/8
Source URLs
Redirection Url
Details Source https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247506484&idx=1&sn=ce0525563b459be8e785fe4b7d5215f0&chksm=ea662d43dd11a4551d89c74cc3f5e1fea4f30622bd1de7df95a129473875def53c2c7dbf34e0&scene=58&subscene=0#rd
URL Provider
Details Provider Source level domain
Details qq.com mp.weixin.qq.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 267 ✔ 奇安信威胁情报中心 https://wechat2rss.xlab.app/feed/b93962f981247c0091dad08df5b7a6864ab888e9.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 73 
cve-2023-28252
Details CVE 29 
cve-2022-37969
Details Domain 452 
msrc.microsoft.com
Details File 1 
通过动态地址获取的方式分别从clfs.sys
Details File 125 
ntoskrnl.exe
Details Url 4 
https://msrc.microsoft.com/update-guide/vulnerability/cve-2023-28252
Details Url 1 
https://www.zscaler.com/blogs/security-research/technical-analysis-windows-clfs-zero-day-vulnerability-cve-2022-37969-part
Details Url 1 
https://www.zscaler.com/blogs/security-research/technical-analysis-windows-clfs-zero-day-vulnerability-cve-2022-37969-part2-exploit-analysis