More human than human – Flame’s code injection techniques
Tags
cmtmf-attack-pattern: Code Injection
attack-pattern: Authentication Package - T1547.002 Code Injection - T1540 Hooking - T1617 Malware - T1587.001 Malware - T1588.001 Rundll32 - T1218.011 Tool - T1588.002 Authentication Package - T1131 Connection Proxy - T1090 Hooking - T1179 Rundll32 - T1085 Hooking
Show in Graph
Common Information
Type Value
UUID d98564c1-3a73-46da-83ea-fb32926e5d2b
Fingerprint 7f18d17f4af456c9
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 13, 2012, midnight
Added to db Jan. 18, 2023, 10:56 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Social media
Title More human than human – Flame’s code injection techniques
Detected Hints/Tags/Attributes 37/2/7
Source URLs
Redirection Url
Details Source https://www.cert.pl/en/news/single/more-human-than-human-flames-code-injection-techniques/
URL Provider
Details Provider Source level domain
Details cert.pl www.cert.pl
Attributes
Details Type #Events CTI Value
Details Domain 18 
windowsupdate.microsoft.com
Details File 306 
services.exe
Details File 212 
winlogon.exe
Details File 1260 
explorer.exe
Details File 2 
wpgfilter.dat
Details File 263 
iexplore.exe
Details File 1018 
rundll32.exe