BlueKeep Attack Detected by AhnLab EDR - ASEC
Tags
attack-pattern: Accessibility Features - T1546.008 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Accessibility Features - T1015 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 9b9dbbde-3bf1-4e7d-8787-420c31b12062
Fingerprint a4a9adcfc904eda0
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 23, 2024, 3 p.m.
Added to db Nov. 15, 2024, 12:52 a.m.
Last updated Nov. 17, 2024, 10:40 p.m.
Headline BlueKeep Attack Detected by AhnLab EDR
Title BlueKeep Attack Detected by AhnLab EDR - ASEC
Detected Hints/Tags/Attributes 15/1/4
Source URLs
Redirection Url
Details Source https://asec.ahnlab.com/en/84437/
URL Provider
Details Provider Source level domain
Details ahnlab.com asec.ahnlab.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 17 ✔ ASEC https://asec.ahnlab.com/en/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 197 
cve-2019-0708
Details File 131 
spoolsv.exe
Details File 2126 
cmd.exe
Details File 7 
narrator.exe