Azure Key Vault Tradecraft with BARK
Tags
cmtmf-attack-pattern: Data Encrypted
attack-pattern: Data Credentials - T1589.001 Powershell - T1059.001 Private Keys - T1552.004 Data Encrypted - T1022 Powershell - T1086 Private Keys - T1145
Show in Graph
Common Information
Type Value
UUID b1101be5-ab93-46c0-a23e-8d19eb32c26e
Fingerprint 3cb36a106751c180
Analysis status DONE
Considered CTI value 2
Text language
Published Nov. 20, 2024, 5:43 p.m.
Added to db Nov. 20, 2024, 7:27 p.m.
Last updated Nov. 21, 2024, 12:30 a.m.
Headline Azure Key Vault Tradecraft with BARK
Title Azure Key Vault Tradecraft with BARK
Detected Hints/Tags/Attributes 25/2/15
Source URLs
Redirection Url
Details Redirection https://medium.com/m/global-identity-2?redirectUrl=https%3A%2F%2Fposts.specterops.io%2Fazure-key-vault-tradecraft-with-bark-24163abc8de3%3Fsource%3Drss----f05f8696e3cc---4
Details Source https://posts.specterops.io/azure-key-vault-tradecraft-with-bark-24163abc8de3?gi=36c368faaea0&source=rss----f05f8696e3cc---4
Details Redirection https://posts.specterops.io/azure-key-vault-tradecraft-with-bark-24163abc8de3?source=rss----f05f8696e3cc---4
Details Source https://posts.specterops.io/azure-key-vault-tradecraft-with-bark-24163abc8de3?gi=ef53aec23e8d&source=rss------cybersecurity-5
Details Redirection https://posts.specterops.io/azure-key-vault-tradecraft-with-bark-24163abc8de3?source=rss------cybersecurity-5
Details Redirection https://medium.com/m/global-identity-2?redirectUrl=https%3A%2F%2Fposts.specterops.io%2Fazure-key-vault-tradecraft-with-bark-24163abc8de3%3Fsource%3Drss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
Details specterops.io posts.specterops.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 196 ✔ Posts By SpecterOps Team Members - Medium https://posts.specterops.io/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
contoso.onmicrosoft.com
Details Domain 2 
keyvaultazurerbac.vault.azure.net
Details Email 1 
username@contoso.onmicrosoft.com
Details md5 2 
3d9ccebb6c7746a7a0a04ca92def08af
Details md5 2 
5286277fc7d24293a8fe4119f9781804
Details md5 2 
d622d2372bf94f85b4752d0a54ae4679
Details Url 2 
https://keyvaultazurerbac.vault.azure.net/secrets/mycertificate
Details Url 2 
https://keyvaultazurerbac.vault.azure.net/secrets/secret1
Details Url 2 
https://keyvaultazurerbac.vault.azure.net/keys/mycertificate
Details Url 2 
https://keyvaultazurerbac.vault.azure.net/keys/mykey
Details Url 2 
https://keyvaultazurerbac.vault.azure.net/certificates/mycertificate
Details Url 2 
https://keyvaultazurerbac.vault.azure.net/secrets/secret1/3d9ccebb6c7746a7a0a04ca92def08af
Details Url 2 
https://keyvaultazurerbac.vault.azure.net
Details Url 2 
https://keyvaultazurerbac.vault.azure.net/secrets/mycertificate/d622d2372bf94f85b4752d0a54ae4679
Details Url 2 
https://keyvaultazurerbac.vault.azure.net/keys/mycertificate/d622d2372bf94f85b4752d0a54ae4679