LemonDuck Malware Detection: Exploits CVE-2017-0144 and Other Microsoft's Server Message BlockSMB Vulnerabilities for Cryptocurrency Mining - SOC Prime
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 81476d10-a342-4228-a967-b9cfff9a6520
Fingerprint c454054b8d9f9b87
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 10, 2024, 11:24 a.m.
Added to db Oct. 10, 2024, 1:41 p.m.
Last updated Nov. 15, 2024, 6:44 a.m.
Headline LemonDuck Malware Detection: Exploits CVE-2017-0144 and Other Microsoft’s Server Message BlockSMB Vulnerabilities for Cryptocurrency Mining
Title LemonDuck Malware Detection: Exploits CVE-2017-0144 and Other Microsoft's Server Message BlockSMB Vulnerabilities for Cryptocurrency Mining - SOC Prime
Detected Hints/Tags/Attributes 50/2/2
Source URLs
Redirection Url
Details Source https://socprime.com/blog/detect-lemonduck-malware-attacks/
URL Provider
Details Provider Source level domain
Details socprime.com socprime.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 237 ✔ SOC Prime https://socprime.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 126 
cve-2017-0144
Details IPv4 3 
211.22.131.99