ADFS Entra Lab with Ludus
Tags
attack-pattern: Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID 2fa1b6b7-b5a5-4593-bc00-471380a83ef8
Fingerprint ab2c135b57c28ec0
Analysis status IN_PROGRESS
Considered CTI value 0
Text language
Published Dec. 19, 2024, 3:57 p.m.
Added to db Dec. 21, 2024, 4:44 a.m.
Last updated Dec. 22, 2024, 6:33 p.m.
Headline ADFS Entra Lab with Ludus
Title ADFS Entra Lab with Ludus
Detected Hints/Tags/Attributes 20/1/12
Source URLs
Redirection Url
Details Redirection https://medium.com/m/global-identity-2?redirectUrl=https%3A%2F%2Fposts.specterops.io%2Fadfs-entra-lab-with-ludus-9bffbc51673f%3Fsource%3Drss----f05f8696e3cc---4
Details Source https://posts.specterops.io/adfs-entra-lab-with-ludus-9bffbc51673f?gi=ba3a89af2911&source=rss----f05f8696e3cc---4
Details Source https://malware.news/t/adfs-entra-lab-with-ludus/89587
Details Redirection https://posts.specterops.io/adfs-entra-lab-with-ludus-9bffbc51673f?source=rss----f05f8696e3cc---4
URL Provider
Details Provider Source level domain
Details malware.news malware.news
Details medium.com medium.com
Details specterops.io posts.specterops.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Details 196 ✔ Posts By SpecterOps Team Members - Medium https://posts.specterops.io/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4689 
github.com
Details Domain 1 
domain.onmicrosoft.com
Details Domain 1 
badsectorlabs.com
Details Domain 484 
medium.com
Details File 1 
azureadconnect.msi
Details File 3 
idpinitiatedsignon.aspx
Details File 1 
c:\windows\tasks\azureadconnect.msi
Details Github username 1 
bagelbyt3s
Details Url 1 
https://github.com/bagelbyt3s/ludus_adfs
Details Url 1 
https://adfs.ludus.nuketown/adfs/ls/idpinitiatedsignon.aspx
Details Url 1 
https://badsectorlabs.com
Details Url 282 
https://medium.com