Bitdefender In depth analysis of APT28–The Political Cyber Espionage
download.bitdefender.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2014-4076Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or…Public exploit1 report22.7%Top 2.3%64.8priority
Where it names them
CVE-2014-4076 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
(78450806E56B1F224D00455EFCD04CE3) features a hardcoded path to a debug file (C:\Users\Пользователь\Desktop\cve-2014-4076\
cve-19abdba\Debug\CVE-2014-4076.pdb).
A tool that exploits a privilege escalation vulnerability (CVE-2014-4076) to gain system privileges (xp.exe)
A tool that exploits a privilege escalation vulnerability (CVE-2014-4076) to gain system privileges (xp.exe)
The tool is built around a vulnerability discovered in 2014 (CVE-2014-4076) and works by sending a specially crafted package to the \\.\\
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.