Modern Defenses and YOU! - Cobalt Strike Research and Development
Tags
cmtmf-attack-pattern: Process Injection
attack-pattern: Domain Fronting - T1090.004 Powershell - T1059.001 Process Hollowing - T1055.012 Process Injection - T1631 Rundll32 - T1218.011 Domain Fronting - T1172 Powershell - T1086 Process Hollowing - T1093 Process Injection - T1055 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID a3730025-27f7-4f15-b816-a42f27ec0281
Fingerprint 7770cd3578315640
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 25, 2017, 9 a.m.
Added to db Jan. 18, 2023, 8:22 p.m.
Last updated Nov. 17, 2024, 10:40 p.m.
Headline Modern Defenses and YOU!
Title Modern Defenses and YOU! - Cobalt Strike Research and Development
Detected Hints/Tags/Attributes 35/2/8
Source URLs
Redirection Url
Details Source https://blog.cobaltstrike.com/2017/10/25/modern-defenses-and-you/
URL Provider
Details Provider Source level domain
Details cobaltstrike.com blog.cobaltstrike.com
Attributes
Details Type #Events CTI Value
Details File 380 
notepad.exe
Details File 1018 
rundll32.exe
Details File 1 
jupdate.exe
Details File 2126 
cmd.exe
Details File 199 
firefox.exe
Details File 1260 
explorer.exe
Details File 1 
c:\path\to\program.exe
Details File 28 
program.exe