SettingContent-ms Used for DeepLink Payload
Tags
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Control Panel - T1218.002 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Powershell - T1059.001 Software - T1592.002 Vulnerabilities - T1588.006 Mshta - T1170 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 9334a7ce-78dc-4278-9bb0-2631bfded3d1
Fingerprint ad55191bbbbc7fa9
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 19, 2018, midnight
Added to db Oct. 15, 2024, 5:20 p.m.
Last updated Oct. 15, 2024, 5:21 p.m.
Headline SettingContent-ms Used for DeepLink Payload
Title SettingContent-ms Used for DeepLink Payload
Detected Hints/Tags/Attributes 40/1/1
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ca/research/18/j/settingcontent-ms-can-be-abused-to-drop-complex-deeplink-and-icon-based-payload.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details CVE 15 
cve-2018-8414