Blue-Team CTF
Tags
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Sql Stored Procedures - T1505.001 Brute Force - T1110 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 83f2e120-ab8e-43cd-8e00-a772dfa4ce22
Fingerprint 900e8c414fb726db
Analysis status DONE
Considered CTI value -2
Text language
Published Dec. 13, 2024, 9:33 p.m.
Added to db Dec. 13, 2024, 11:09 p.m.
Last updated Dec. 21, 2024, 4:49 a.m.
Headline Blue-Team CTF
Title Blue-Team CTF
Detected Hints/Tags/Attributes 46/1/14
Source URLs
Redirection Url
Details Source https://medium.com/@ahmedsallam091/blue-team-ctf-67dd87954ef2?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 58 
live.com
Details Domain 54 
intel471.com
Details Domain 157 
system.security
Details File 224 
winlogon.exe
Details File 7 
checking.ps1
Details File 8 
del.ps1
Details File 7 
invoke-powerdump.ps1
Details File 24 
hashes.txt
Details File 4 
extracted_hosts.txt
Details IPv4 3 
87.96.21.81
Details IPv4 4 
87.96.21.84
Details Url 1 
https://intel471.com/blog/understanding-and-combating-the-bluesky-ransomware-threat
Details Url 4 
http://87.96.21.84/checking.ps1
Details Url 4 
http://87.96.21.84/del.ps1