Block
Tags
| attack-pattern: | Data Credentials - T1589.001 Server - T1583.004 Server - T1584.004 Sudo - T1169 |
Common Information
| Type | Value |
|---|---|
| UUID | e6a2344c-e2cc-496e-809f-04499343f093 |
| Fingerprint | 86023b591f002ed4 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 14, 2024, 1:36 p.m. |
| Added to db | Oct. 14, 2024, 3:59 p.m. |
| Last updated | Nov. 18, 2024, 1:38 a.m. |
| Headline | Block |
| Title | Block |
| Detected Hints/Tags/Attributes | 31/1/42 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 167 | ✔ | Cybersecurity on Medium | https://medium.com/feed/tag/cybersecurity | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 5 | evidence.zip |
|
| Details | Domain | 1 | evidence-1697996360986.zip |
|
| Details | Domain | 24 | arc4.new |
|
| Details | Domain | 5 | hashlib.new |
|
| Details | Domain | 14 | hmac.new |
|
| Details | Domain | 1 | dec.py |
|
| Details | Domain | 1 | laud.py |
|
| Details | File | 5 | evidence.zip |
|
| Details | File | 1 | evidence-1697996360986.zip |
|
| Details | File | 38 | lsass.dmp |
|
| Details | File | 13 | mimidrv.sys |
|
| Details | File | 77 | mimikatz.exe |
|
| Details | File | 15 | mimilib.dll |
|
| Details | File | 3 | mimilove.exe |
|
| Details | File | 4 | mimispool.dll |
|
| Details | File | 52 | hash.txt |
|
| Details | File | 224 | rockyou.txt |
|
| Details | File | 5 | args.pas |
|
| Details | File | 50 | hashlib.md5 |
|
| Details | File | 5 | args.key |
|
| Details | File | 1 | dec.py |
|
| Details | File | 1 | clients156.csv |
|
| Details | File | 1 | qc.doc |
|
| Details | File | 2 | conv.pdf |
|
| Details | File | 1 | myra-security-in-a-nutshell.pdf |
|
| Details | File | 1 | laud.py |
|
| Details | File | 1 | clients978.csv |
|
| Details | md5 | 1 | 286c133a1b67c068f86cef06785e104d |
|
| Details | md5 | 1 | 1f9175a516211660c7a8143b0f36ab44 |
|
| Details | md5 | 1 | 3d618a1fffd6c879cd0b056910ec0c31 |
|
| Details | md5 | 1 | 16e816dead16d4ca7d5d6dee4a015c14 |
|
| Details | md5 | 1 | fde53b54cb676b9bbf0fb1fbef384698 |
|
| Details | md5 | 1 | 20a642c086ef74eee26277bf1d0cff8c |
|
| Details | md5 | 1 | 3f29138a04aadc19214e9c04028bf381 |
|
| Details | md5 | 1 | 0ca6227a4f00b9654a48908c4801a0ac |
|
| Details | md5 | 1 | c24f5102a22d286336aac2dfa4dc2e04 |
|
| Details | md5 | 1 | f48087e449d58b400e283a27914209b9 |
|
| Details | md5 | 1 | 9754d7acae384644b196c05cda5315df |
|
| Details | md5 | 1 | facfbdf010d00aa2574c7c41201099e8 |
|
| Details | sha1 | 1 | ccd27b4bf489ffda2251897ef86fdb488f248aef |
|
| Details | IPv4 | 1 | 10.0.2.70 |
|
| Details | IPv4 | 2 | 10.0.2.64 |