Server Message Block: SMB Relay Attack (Attack That Always Works)
Common Information
Type Value
UUID e7dec2a7-942b-4173-92af-2a0a31a8f41d
Fingerprint 863b5b5339247c91
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 8, 2016, 12:39 p.m.
Added to db Jan. 18, 2023, 9:25 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Server Message Block: SMB Relay Attack (The Attack That Always Works)
Title Server Message Block: SMB Relay Attack (Attack That Always Works)
Detected Hints/Tags/Attributes 31/1/7
Attributes
Details Type #Events CTI Value
Details Domain 5
smbrelayx.py
Details File 1122
svchost.exe
Details File 5
smbrelayx.py
Details File 1
smb_rev.exe
Details IPv4 1
10.10.10.99
Details IPv4 2
10.10.10.250
Details IPv4 3
10.10.10.200