Attacks Against Windows PXE Boot Images
Tags
attack-pattern: Data Credentials - T1589.001 Lsa Secrets - T1003.004 Lsass Memory - T1003.001 Pass The Hash - T1550.002 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Hypervisor - T1062 Pass The Hash - T1075
Show in Graph
Common Information
Type Value
UUID ef05cd26-32d8-4a22-81e5-9b3b4704b8d2
Fingerprint b519bb536d652787
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 13, 2018, 7 a.m.
Added to db Jan. 18, 2023, 8:37 p.m.
Last updated Nov. 18, 2024, 10:24 a.m.
Headline Attacks Against Windows PXE Boot Images
Title Attacks Against Windows PXE Boot Images
Detected Hints/Tags/Attributes 47/1/8
Source URLs
Redirection Url
Details Source https://blog.netspi.com/attacks-against-windows-pxe-boot-images/
URL Provider
Details Provider Source level domain
Details netspi.com blog.netspi.com
Attributes
Details Type #Events CTI Value
Details Domain 198 
youtube.com
Details File 122 
psexec.exe
Details File 2129 
cmd.exe
Details File 33 
sethc.exe
Details File 1 
%windir%system32sethc.exe
Details File 7 
unattend.xml
Details md5 2 
F6F38B793DB6A94BA04A52F1D3EE92F0
Details IPv4 5 
192.168.100.20