Unleashing auto_rip
Tags
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | e8f9bcac-c7ab-41a2-8c19-e2a9b6494f80 |
| Fingerprint | d69458773eb7a70f |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 21, 2013, midnight |
| Added to db | Jan. 18, 2023, 7:55 p.m. |
| Last updated | Nov. 8, 2024, 12:45 a.m. |
| Headline | Journey Into Incident Response |
| Title | Unleashing auto_rip |
| Detected Hints/Tags/Attributes | 23/1/8 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | http://journeyintoir.blogspot.com/2013/05/unleashing-autorip.html |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4 | rip.pl |
|
| Details | File | 193 | ntuser.dat |
|
| Details | File | 28 | usrclass.dat |
|
| Details | File | 1 | h:\windows\system32\config -c all extract file and network access information from ntuser.dat |
|
| Details | File | 1 | auto_rip.pl |
|
| Details | File | 1 | auto_rip.exe |
|
| Details | File | 4 | rip.pl |
|
| Details | File | 6 | rip.exe |