3CX Supply Chain Campaign Technical analysis and POC
Tags
cmtmf-attack-pattern: Application Layer Protocol Obfuscated Files Or Information Supply Chain Compromise
attack-pattern: Data Application Layer Protocol - T1437 Credentials From Password Stores - T1555 Dll Side-Loading - T1574.002 Hijack Execution Flow - T1625 Hijack Execution Flow - T1574 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Obfuscated Files Or Information - T1406 Server - T1583.004 Server - T1584.004 Software - T1592.002 Steal Web Session Cookie - T1539 Supply Chain Compromise - T1474 Virtualization/Sandbox Evasion - T1497 Time Based Evasion - T1497.003 Virtualization/Sandbox Evasion - T1633 Standard Application Layer Protocol - T1071 Deobfuscate/Decode Files Or Information - T1140 Dll Side-Loading - T1073 Obfuscated Files Or Information - T1027 Supply Chain Compromise - T1195 User Execution - T1204 Supply Chain Compromise User Execution
Show in Graph
Common Information
Type Value
UUID c8e7aaf6-ccf5-4de4-9f22-6abebdfa05da
Fingerprint 41d195a0727ae4c
Analysis status DONE
Considered CTI value 2
Text language
Published May 9, 2023, 7:25 p.m.
Added to db May 9, 2023, 4:48 p.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline 3CX Supply Chain Campaign Technical analysis and POC
Title 3CX Supply Chain Campaign Technical analysis and POC
Detected Hints/Tags/Attributes 68/2/12
Source URLs
Redirection Url
Details Source https://blog.securelayer7.net/3cx-supply-chain-campaign-technical-analysis/
URL Provider
Details Provider Source level domain
Details securelayer7.net blog.securelayer7.net
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 38 
3cxdesktopapp.exe
Details File 62 
ffmpeg.dll
Details File 50 
d3dcompiler_47.dll
Details MITRE ATT&CK Techniques 52 
T1195
Details MITRE ATT&CK Techniques 365 
T1204.002
Details MITRE ATT&CK Techniques 504 
T1140
Details MITRE ATT&CK Techniques 627 
T1027
Details MITRE ATT&CK Techniques 227 
T1574.002
Details MITRE ATT&CK Techniques 57 
T1497.003
Details MITRE ATT&CK Techniques 172 
T1555
Details MITRE ATT&CK Techniques 99 
T1539
Details MITRE ATT&CK Techniques 444 
T1071