주간 탐지 룰(YARA, Snort) 정보 - 2025년 3월 2주차 - ASEC
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Exploits - T1587.004 Exploits - T1588.005 Mshta - T1218.005 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Mshta - T1170 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | eb2ffe8c-4541-4289-809e-e238a57ff94a |
| Fingerprint | fc770cd378cb1986 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | March 11, 2025, 3 p.m. |
| Added to db | March 12, 2025, 1:08 p.m. |
| Last updated | March 20, 2025, 10:39 p.m. |
| Headline | 주간 탐지 룰(YARA, Snort) 정보 – 2025년 3월 2주차 |
| Title | 주간 탐지 룰(YARA, Snort) 정보 - 2025년 3월 2주차 - ASEC |
| Detected Hints/Tags/Attributes | 20/2/11 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/ko/86758/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 18 | ✔ | ASEC | https://asec.ahnlab.com/ko/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 10 | cve-2024-48248 |
|
| Details | CVE | 16 | cve-2018-1000861 |
|
| Details | CVE | 15 | cve-2019-1003000 |
|
| Details | CVE | 15 | cve-2022-43769 |
|
| Details | CVE | 14 | cve-2022-43939 |
|
| Details | CVE | 24 | cve-2020-3259 |
|
| Details | Domain | 5902 | github.com |
|
| Details | Domain | 62 | rules.emergingthreatspro.com |
|
| Details | Github username | 37 | t4d |
|
| Details | Url | 37 | https://github.com/t4d/phishingkit-yara-rules |
|
| Details | Url | 59 | https://rules.emergingthreatspro.com/open |