Investigating HVNC Attacks
Tags
attack-pattern: Data Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vnc - T1021.005 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID d49845c0-b6a6-47dc-b754-6b9f4cb3b8bf
Fingerprint d5d09489d0a98744
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 22, 2023, 2:29 p.m.
Added to db Aug. 31, 2024, 2:41 a.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline
Title Investigating HVNC Attacks
Detected Hints/Tags/Attributes 18/1/5
Source URLs
Redirection Url
Details Source https://emptydc.com/2023/09/22/investigating-hvnc-attacks/
URL Provider
Details Provider Source level domain
Details emptydc.com emptydc.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 108 ✔ — https://emptydc.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4128 
github.com
Details File 69 
client.exe
Details File 1208 
powershell.exe
Details Github username 1 
mscholtes
Details Url 1 
https://github.com/mscholtes/psvirtualdesktop