Discovering Splinter: A First Look at a New Post-Exploitation Red Team Tool
Tags
cmtmf-attack-pattern: Process Injection
country: Japan
attack-pattern: Data Model Models Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Process Injection - T1631 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Process Injection - T1055
Show in Graph
Common Information
Type Value
UUID cfcd6413-0094-483e-9b8a-9ec2b9cc7039
Fingerprint 3c7c1ddace2301d7
Analysis status DONE
Considered CTI value -2
Text language
Published Sept. 19, 2024, 10 a.m.
Added to db Sept. 19, 2024, 12:14 p.m.
Last updated Sept. 20, 2024, 10:49 a.m.
Headline Discovering Splinter: A First Look at a New Post-Exploitation Red Team Tool
Title Discovering Splinter: A First Look at a New Post-Exploitation Red Team Tool
Detected Hints/Tags/Attributes 61/3/4
Source URLs
Redirection Url
Details Source https://unit42.paloaltonetworks.com/analysis-pentest-tool-splinter/
URL Provider
Details Provider Source level domain
Details paloaltonetworks.com unit42.paloaltonetworks.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 256 ✔ Unit 42 https://unit42.paloaltonetworks.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details sha256 2 
1962cef10cf737300d04a23139122abcc8e8803e54dfcb63054140fbe549bed0
Details IPv4 1 
192.168.5.151
Details Pdb 1 
c:\gitlab-runner\builds\_fuzhmf8i\0\h3upperbounds\red-team\implant\splinter_core\target\release\deps\implant_exe.pdb
Details Pdb 1 
implant_dll.pdb