ZeroLogon to Ransomware
Tags
attack-pattern: Data Credentials - T1589.001 Local Account - T1087.001 Local Account - T1136.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002 New Service - T1050 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID b3792215-971d-4f1d-9911-bcd45308f670
Fingerprint d78109958a4054e0
Analysis status DONE
Considered CTI value 0
Text language
Published March 5, 2021, 4:01 a.m.
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline ZeroLogon to Ransomware
Title ZeroLogon to Ransomware
Detected Hints/Tags/Attributes 42/1/5
Source URLs
Redirection Url
Details Source https://blogs.blackberry.com/en/2021/03/zerologon-to-ransomware
URL Provider
Details Provider Source level domain
Details blackberry.com blogs.blackberry.com
Attributes
Details Type #Events CTI Value
Details CVE 217 
cve-2020-1472
Details Domain 452 
msrc.microsoft.com
Details File 11 
zero.exe
Details File 4 
mimikatz.log
Details Url 4 
https://msrc.microsoft.com/update-guide/vulnerability/cve-2020-1472