Commando VM 2.0: Customization, Containers, and Kali, Oh My! | Mandiant
Tags
attack-pattern: Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 02fa4fca-0348-46e0-9c1e-87de83c20659
Fingerprint ac034d5a90a7a2ea
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 7, 2019, midnight
Added to db Nov. 6, 2023, 7:06 p.m.
Last updated Dec. 22, 2024, 6:33 p.m.
Headline Commando VM 2.0: Customization, Containers, and Kali, Oh My!
Title Commando VM 2.0: Customization, Containers, and Kali, Oh My! | Mandiant
Detected Hints/Tags/Attributes 38/1/11
Source URLs
Redirection Url
Details Source https://www.fireeye.com/blog/threat-research/2019/08/commando-vm-customization-containers-kali.html
Details Redirection https://www.mandiant.com/resources/commando-vm-customization-containers-kali
Details Source https://www.mandiant.com/resources/blog/commando-vm-customization-containers-kali
URL Provider
Details Provider Source level domain
Details fireeye.com www.fireeye.com
Details mandiant.com www.mandiant.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 330 ✔ Threat Intelligence https://www.mandiant.com/resources/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4689 
github.com
Details File 1 
amass.ps1
Details File 5 
profile.json
Details File 28 
install.ps1
Details File 5 
chocolateyinstall.ps1
Details File 1 
chocolateyuninstall.ps1
Details File 2 
packages.json
Details File 1352 
powershell.exe
Details File 1 
myprofile.json
Details Github username 27 
fireeye
Details Url 2 
https://github.com/fireeye/commando-vm