嗅探文档中的WPS 0day漏洞气息
Tags
Common Information
| Type | Value |
|---|---|
| UUID | b2c0391d-b684-4541-aead-690ad3c3e8a7 |
| Fingerprint | 3469cad035cff0bf |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Aug. 23, 2023, midnight |
| Added to db | Oct. 23, 2023, 1:10 a.m. |
| Last updated | Dec. 21, 2024, 2:20 a.m. |
| Headline | 嗅探文档中的WPS 0day漏洞气息 |
| Title | 嗅探文档中的WPS 0day漏洞气息 |
| Detected Hints/Tags/Attributes | 3/0/16 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 267 | ✔ | 奇安信威胁情报中心 | https://wechat2rss.xlab.app/feed/b93962f981247c0091dad08df5b7a6864ab888e9.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 32 | sandbox.ti.qianxin.com |
|
| Details | Domain | 1 | 76z1xwz6mp5fq7qi4telphdn0c0.oss-cn-shenzhen.aliyuncs.com |
|
| Details | Domain | 1 | 6e8t0xobdnmerpraecktu1bge1kmo1cs.oss-cn-shenzhen.aliyuncs.com |
|
| Details | File | 1 | 2023年企业薪资调整通知.docx |
|
| Details | File | 1 | 共克时艰-2023年企业薪资调整通知.docx |
|
| Details | File | 1 | eqnedit.exe |
|
| Details | File | 6 | symsrv.dll |
|
| Details | File | 1 | 进而启动覆盖后的eqnedit.exe |
|
| Details | File | 1 | 恶意symsrv.dll |
|
| Details | IPv4 | 1 | 123.57.150.145 |
|
| Details | IPv4 | 1 | 39.105.128.11 |
|
| Details | IPv4 | 1 | 47.93.247.53 |
|
| Details | IPv4 | 1 | 123.56.0.10 |
|
| Details | IPv4 | 1 | 39.105.138.249 |
|
| Details | IPv4 | 1 | 182.92.111.169 |
|
| Details | Url | 9 | https://sandbox.ti.qianxin.com |