ETWHash - "He who listens, shall receive" - LRQA Nettitude Labs
Tags
| attack-pattern: | Authentication Attempt - T1381 Keylogging - T1056.001 Keylogging - T1417.001 Security Support Provider - T1547.005 Tool - T1588.002 Security Support Provider - T1101 |
Common Information
| Type | Value |
|---|---|
| UUID | 8ad27fb7-09a8-4dd7-9199-60b284d258e1 |
| Fingerprint | a41fdab0b4b70ee4 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 3, 2023, 10:58 a.m. |
| Added to db | Nov. 6, 2023, 8:05 p.m. |
| Last updated | Nov. 17, 2024, 11:40 p.m. |
| Headline | ETWHash – “He who listens, shall receive” |
| Title | ETWHash - "He who listens, shall receive" - LRQA Nettitude Labs |
| Detected Hints/Tags/Attributes | 17/1/9 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://labs.nettitude.com/blog/etwhash-he-who-listens-shall-receive/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 151 | ✔ | LRQA Nettitude Labs | https://labs.nettitude.com/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4128 | github.com |
|
| Details | Github username | 19 | nettitude |
|
| Details | Github username | 2 | zodiacon |
|
| Details | Github username | 1 | 0xeb |
|
| Details | Github username | 19 | mandiant |
|
| Details | Url | 1 | https://github.com/nettitude/etwhash |
|
| Details | Url | 1 | https://github.com/zodiacon/etwexplorer |
|
| Details | Url | 1 | https://github.com/0xeb/wintools/tree/master/wepexplorer |
|
| Details | Url | 1 | https://github.com/mandiant/silketw |