The real tools of cybercriminals
Tags
cmtmf-attack-pattern: Command-Line Interface
attack-pattern: Data Model Command-Line Interface - T1605 Credentials - T1589.001 Hardware - T1592.001 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Mshta - T1218.005 Powershell - T1059.001 Regsvr32 - T1218.010 Rundll32 - T1218.011 Software - T1592.002 Tool - T1588.002 Command-Line Interface - T1059 Mshta - T1170 Powershell - T1086 Regsvr32 - T1117 Rundll32 - T1085 Scripting - T1064 Windows Management Instrumentation - T1047 Command-Line Interface Scripting
Show in Graph
Common Information
Type Value
UUID bb2d1148-2b89-47f2-ac60-24042b3e22b3
Fingerprint b6001b5180b586d7
Analysis status DONE
Considered CTI value 0
Text language
Published March 8, 2022, 9:20 a.m.
Added to db Sept. 11, 2022, 12:40 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline An attacker's toolchest: Living off the land
Title The real tools of cybercriminals
Detected Hints/Tags/Attributes 81/2/16
Source URLs
Redirection Url
Details Source https://feeds.feedblitz.com/~/685149666/0/gdatasecurityblog-en~An-attackers-toolchest-Living-off-the-land
URL Provider
Details Provider Source level domain
Details feedblitz.com feeds.feedblitz.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 113 ✔ G Data SecurityBlog (english) https://feeds.feedblitz.com/gdatasecurityblog-en&x=1 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 249 
schtasks.exe
Details File 49 
nltest.exe
Details File 240 
wmic.exe
Details File 118 
sc.exe
Details File 105 
bcdedit.exe
Details File 76 
ping.exe
Details File 256 
net.exe
Details File 456 
mshta.exe
Details File 1018 
rundll32.exe
Details File 61 
systeminfo.exe
Details File 27 
attrib.exe
Details File 165 
reg.exe
Details File 82 
taskkill.exe
Details File 37 
icacls.exe
Details File 345 
vssadmin.exe
Details File 1208 
powershell.exe