CyberSecLabs — “Cold” Walkthrough
Tags
attack-pattern: Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Python - T1059.006 Server - T1583.004 Server - T1584.004 Windows Remote Management - T1021.006 Tool - T1588.002 Vulnerabilities - T1588.006 Windows Remote Management - T1028
Show in Graph
Common Information
Type Value
UUID bf41a60c-6f51-4d43-a57f-a9151390f8b6
Fingerprint 1bb15c599505b5d9
Analysis status DONE
Considered CTI value -2
Text language
Published Sept. 27, 2024, 4:31 p.m.
Added to db Sept. 27, 2024, 6:49 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline CyberSecLabs — “Cold” Walkthrough
Title CyberSecLabs — “Cold” Walkthrough
Detected Hints/Tags/Attributes 39/1/7
Source URLs
Redirection Url
Details Source https://medium.com/@luk3ster/cyberseclabs-cold-walkthrough-20dc1d330483?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 33 
shell.exe
Details File 226 
certutil.exe
Details File 3 
winpeas.exe
Details File 4 
access.txt
Details File 14 
system.txt
Details IPv4 1 
172.31.1.15
Details Url 1 
http://172.31.1.15:8500/cfide/administrator