Issue certificates for IIS and Exchange with Let’s Encrypt
Tags
attack-pattern: Cloud Services - T1021.007 Dns Server - T1583.002 Dns Server - T1584.002 Domains - T1583.001 Domains - T1584.001 Impersonation - T1656 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 6be22043-5c53-4915-ba2c-af5ba18310ec
Fingerprint 6519a0d307283c98
Analysis status DONE
Considered CTI value 0
Text language
Published March 20, 2019, 2:56 a.m.
Added to db Jan. 18, 2023, 8:02 p.m.
Last updated Nov. 18, 2024, 1:38 a.m.
Headline Issue certificates for IIS and Exchange with Let’s Encrypt
Title Issue certificates for IIS and Exchange with Let’s Encrypt
Detected Hints/Tags/Attributes 26/1/13
Source URLs
Redirection Url
Details Source https://4sysops.com/archives/issue-certificates-for-iis-and-exchange-with-lets-encrypt/
URL Provider
Details Provider Source level domain
Details 4sysops.com 4sysops.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
httpsacme-v01.api.letsencrypt.org
Details Domain 1 
acme-v01.api.letsencrypt.org
Details Domain 1 
name-of-the-certificate.com
Details Domain 1 
ex01.domain.com
Details File 1 
letsencrypt.exe
Details File 1 
exchangeletsencrypt.ps1
Details File 1 
c:\inetpub\letsencrypt\letsencrypt.exe
Details File 1209 
powershell.exe
Details File 1 
c:\inetpub\letsencrypt\exchangeletsencrypt.ps1
Details File 1 
com-all.pfx
Details File 1 
exchangeinstallle.bat
Details IPv4 1 
1.9.12.2
Details Url 1 
https://acme-v01.api.letsencrypt.org/powershell.exe