Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
3 IOCs

CVE-2017-0199 – Old Flaws New Techniques

Security Investigation
Security Investigation
Published August 22, 2022Original Report

Threat Actors

Excerpt

An exploit is a malicious program that takes advantage of a software vulnerability that may enable a remote attacker to gain access to the targeted system. In this article, we are going to discuss the CVE-2017-0199 exploit campaign. Execution Flow Source: socinvestigation.com Here, the exploit arrives as a spear-phishing email attachment. This kind of email contains Microsoft office word documents (.docx) or sometimes with password-protected archives format attachments. Also…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYTurlaINFRASTRUCTUREunknownCAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure
Capability
Victim

Indicators of Compromise

Open the mindmap →

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2017-0199MediumScore 56/100First seen
MD52c22414f50dd46dadca71add23d98046MediumScore 53/100First seen
MD5d5ef9a5ee8c65d347913d486d32d1768MediumScore 53/100First seen

IOC Relationship Graph

Building graph…