Text4Shell++ - Where There’s Smoke, There’s Fire
Tags
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Javascript - T1059.007 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID db4bb3d9-6b32-4f89-a212-85a1433b624a
Fingerprint bc399d832e3f01c0
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 8, 2022, midnight
Added to db Nov. 17, 2024, 12:54 p.m.
Last updated Nov. 17, 2024, 12:57 p.m.
Headline Text4Shell++ - Where There’s Smoke, There’s Fire
Title Text4Shell++ - Where There’s Smoke, There’s Fire
Detected Hints/Tags/Attributes 48/1/13
Source URLs
Redirection Url
Details Source https://labs.watchtowr.com/text4shell-where-theres-smoke-theres-fire/
URL Provider
Details Provider Source level domain
Details watchtowr.com labs.watchtowr.com
Attributes
Details Type #Events CTI Value
Details CVE 2 
cve-2022-44889
Details Domain 4 
www.watchtowr.com
Details Domain 2 
stringsubstitutor.java
Details Domain 3 
document.properties
Details Domain 78 
attacker.com
Details Domain 1 
log.host
Details Domain 5 
watchtowr.com
Details Email 1 
email+=+aliz@watchtowr.com
Details File 2 
stringsubstitutor.java
Details File 10 
event.key
Details File 58 
document.xml
Details IPv4 1 
192.168.182.138
Details Url 4 
https://www.watchtowr.com