SprayWMI - PowerShell Injection Mass Spray Tool - Darknet - Hacking Tools, Hacker News & Cyber Security
Tags
| attack-pattern: | Ip Addresses - T1590.005 Powershell - T1059.001 Python - T1059.006 Tool - T1588.002 New Service - T1050 Powershell - T1086 Windows Management Instrumentation - T1047 |
Common Information
| Type | Value |
|---|---|
| UUID | 72b1ddd9-8124-4402-9149-be0908a27e40 |
| Fingerprint | 22dab55795ad1ab7 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 8, 2015, 2:15 a.m. |
| Added to db | Jan. 18, 2023, 11:06 p.m. |
| Last updated | Nov. 17, 2024, 12:54 p.m. |
| Headline | SprayWMI – PowerShell Injection Mass Spray Tool |
| Title | SprayWMI - PowerShell Injection Mass Spray Tool - Darknet - Hacking Tools, Hacker News & Cyber Security |
| Detected Hints/Tags/Attributes | 29/1/21 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | spraywmi.py |
|
| Details | File | 1 | spraywmi.py |
|
| Details | File | 15 | ips.txt |
|
| Details | File | 79 | file.txt |
|
| Details | IPv4 | 262 | 192.168.1.1 |
|
| Details | IPv4 | 32 | 192.168.2.1 |
|
| Details | IPv4 | 1 | 192.168.90.1 |
|
| Details | IPv4 | 1 | 192.168.96.20 |
|
| Details | IPv4 | 1 | 192.168.96.21 |
|
| Details | IPv4 | 1 | 192.168.96.22 |
|
| Details | IPv4 | 1 | 192.168.96.23 |
|
| Details | IPv4 | 1 | 192.168.96.242 |
|
| Details | IPv4 | 7 | 192.168.1.13 |
|
| Details | IPv4 | 1 | 192.168.90.174 |
|
| Details | IPv4 | 1 | 192.168.47.24 |
|
| Details | IPv4 | 1 | 192.168.90.203 |
|
| Details | IPv4 | 1 | 192.168.90.184 |
|
| Details | IPv4 | 1 | 192.168.90.204 |
|
| Details | IPv4 | 1 | 192.168.90.175 |
|
| Details | IPv4 | 1 | 192.168.90.248 |
|
| Details | IPv4 | 1 | 192.168.90.39 |