Hack The Box | Sherlock | Campfire-1
Tags
| attack-pattern: | Data Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Kerberoasting - T1558.003 Powershell - T1059.001 Tool - T1588.002 Kerberoasting - T1208 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | bb43ccbe-4a84-4346-a151-db3feaa4720c |
| Fingerprint | 514ab40a33e58181 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Nov. 22, 2024, 10:06 p.m. |
| Added to db | Nov. 22, 2024, 11:38 p.m. |
| Last updated | Dec. 23, 2024, 11:17 a.m. |
| Headline | Hack The Box | Sherlock | Campfire-1 |
| Title | Hack The Box | Sherlock | Campfire-1 |
| Detected Hints/Tags/Attributes | 23/1/14 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 167 | ✔ | Cybersecurity on Medium | https://medium.com/feed/tag/cybersecurity | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | campfire-1.zip |
|
| Details | Domain | 80 | schemas.microsoft.com |
|
| Details | 1 | alonzo.spire@forela.local |
||
| Details | File | 1 | campfire-1.zip |
|
| Details | File | 1 | 'event.sys |
|
| Details | File | 4 | alonzo.spi |
|
| Details | File | 3 | c:\users\alonzo.spi |
|
| Details | File | 39 | powerview.ps1 |
|
| Details | File | 9 | pecmd.exe |
|
| Details | File | 1 | result.csv |
|
| Details | File | 37 | rubeus.exe |
|
| Details | IPv4 | 4 | 172.17.79.129 |
|
| Details | IPv6 | 4 | ::ffff:172 |
|
| Details | Url | 5 | http://schemas.microsoft.com/win/2004/08/events/event |