SmarterMail Password Decryption Updates – Joe's Security Blog
Tags
attack-pattern: Data Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID cafad416-7738-4fab-9307-75c8836d86da
Fingerprint e07c358793834b1
Analysis status DONE
Considered CTI value 0
Text language
Published May 24, 2016, 6:12 p.m.
Added to db Jan. 18, 2023, 11:19 p.m.
Last updated Nov. 16, 2024, 11:18 a.m.
Headline Joe's Security Blog
Title SmarterMail Password Decryption Updates – Joe's Security Blog
Detected Hints/Tags/Attributes 10/1/13
Source URLs
Redirection Url
Details Source https://www.gironsec.com/blog/2016/05/smartermail-password-decryption-updates/
URL Provider
Details Provider Source level domain
Details gironsec.com www.gironsec.com
Attributes
Details Type #Events CTI Value
Details Domain 34 
system.data
Details Domain 61 
system.windows
Details Domain 149 
system.security
Details Domain 228 
system.io
Details Domain 9 
filemode.open
Details Domain 6 
fileaccess.read
Details Domain 4 
cryptostreammode.read
Details File 51 
system.dat
Details File 19 
system.xml
Details File 3 
des.key
Details File 1 
paddingmode.iso
Details Mandiant Temporary Group Assumption 1 
TEMP.WUT
Details Mandiant Temporary Group Assumption 1 
TEMP.HUH