🐾 - 🔔 SMB - Brute Force attack - Password Cracking 🥷 - T1110.002 - Suricata Rule 3301160 (pawpatrules)

🐾 - 🔔 SMB - Brute Force attack - Password Cracking 🥷 - T1110.002

SID: 3301160Rev: 1102 views

Sourcepawpatrules

CreatedApril 23, 2024

UpdatedApril 23, 2024

Classificationattempted-recon

alert tcp-pkt $HOME_NET 445 -> any any (msg:"🐾 - 🔔 SMB - Brute Force attack - Password Cracking 🥷 - T1110.002"; flow:to_client, stateless; threshold:type threshold, track by_src, count 5, seconds 5; content:"|fe 53 4d 42 40 00 01 00 6d 00 00 c0 01 00 01 00 01 00 00 00|"; reference:url,https://attack.mitre.org/techniques/T1110/002/; reference:url,https://0xma.github.io/hacking/brute_force_windows_server_metasploit.html; metadata:created_at 2024_04_23, updated_at 2024_04_23, signature_severity Major, attack_target Server_Endpoint, affected_product Windows_Server_32_64_Bit, mitre_tactic_id TA0006, mitre_tactic_name Credential_Access, mitre_technique_id T1110_002, mitre_technique_name Brute_Force_Password_Cracking; sid:3301160; rev:1; classtype:attempted-recon;)

References

url	https://attack.mitre.org/techniques/T1110/002/
url	https://0xma.github.io/hacking/brute_force_windows_server_metasploit.html

Metadata

created at2024_04_23

updated at2024_04_23

signature severityMajor

attack targetServer_Endpoint

affected productWindows_Server_32_64_Bit

mitre tactic idTA0006

mitre tactic nameCredential_Access

mitre technique idT1110_002

mitre technique nameBrute_Force_Password_Cracking

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!