Commando VM: The First of Its Kind Windows Offensive Distribution | Mandiant
Tags
attack-pattern: Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 8de9b9ff-5de1-48a6-8920-8710846c0d60
Fingerprint 9413cddbc622b286
Analysis status DONE
Considered CTI value 0
Text language
Published March 28, 2019, midnight
Added to db Nov. 6, 2023, 7:07 p.m.
Last updated Nov. 18, 2024, 1:38 a.m.
Headline Commando VM: The First of Its Kind Windows Offensive Distribution
Title Commando VM: The First of Its Kind Windows Offensive Distribution | Mandiant
Detected Hints/Tags/Attributes 66/1/4
Source URLs
Redirection Url
Details Source https://www.fireeye.com/blog/threat-research/2019/03/commando-vm-windows-offensive-distribution.html
Details Redirection https://www.mandiant.com/resources/commando-vm-windows-offensive-distribution
Details Source https://www.mandiant.com/resources/blog/commando-vm-windows-offensive-distribution
URL Provider
Details Provider Source level domain
Details fireeye.com www.fireeye.com
Details mandiant.com www.mandiant.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 330 ✔ Threat Intelligence https://www.mandiant.com/resources/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 26 
install.ps1
Details File 2127 
cmd.exe
Details File 68 
config.ini
Details IPv4 2 
192.168.38.104