CVE2015

CVE-2015-1641

1Rules

2References

1Folders

2021-11-27Latest

Summary

CVE-2015-1641 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2015. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threatcriticalstable

Exploit for CVE-2015-1641

Detects Winword starting uncommon sub process MicroScMgmt.exe as used in exploits for CVE-2015-1641

WindowsProcess Creation

TA0005 · StealthT1036.005 · Match Legitimate Resource Name or Locationcve.2015-1641detection.emerging-threats

Florian Roth (Nextron Systems)Thu Feb 222015

References