PoshC2 - new features - Nettitude Labs
Tags
attack-pattern: Direct Credentials - T1589.001 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Windows Service - T1543.003 Tool - T1588.002 Connection Proxy - T1090 Graphical User Interface - T1061 New Service - T1050 Powershell - T1086 Scheduled Task - T1053 Graphical User Interface
Show in Graph
Common Information
Type Value
UUID 0f9c8e94-4388-4f4d-8521-7f37442e8b6d
Fingerprint b1390c5f19e32aad
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 1, 2016, 2:48 p.m.
Added to db Jan. 18, 2023, 9:56 p.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline PoshC2 – new features
Title PoshC2 - new features - Nettitude Labs
Detected Hints/Tags/Attributes 47/1/4
Source URLs
Redirection Url
Details Source https://labs.nettitude.com/blog/poshc2-new-features/
URL Provider
Details Provider Source level domain
Details nettitude.com labs.nettitude.com
Attributes
Details Type #Events CTI Value
Details Domain 4128 
github.com
Details Github username 19 
nettitude
Details Url 3 
https://github.com/nettitude/poshc2
Details Windows Registry Key 582 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run