Extracted
Tags
| attack-pattern: | Data Powershell - T1059.001 Python - T1059.006 Software - T1592.002 Tool - T1588.002 Brute Force - T1110 Powershell - T1086 |
Common Information
| Type | Value |
|---|---|
| UUID | ea5eee3c-9068-41a3-9ae2-8bf1a5e53715 |
| Fingerprint | 3042f92afe3523e8 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 23, 2024, 6:27 a.m. |
| Added to db | Dec. 23, 2024, 8:19 a.m. |
| Last updated | Dec. 23, 2024, 5:07 p.m. |
| Headline | Extracted |
| Title | Extracted |
| Detected Hints/Tags/Attributes | 42/1/42 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 167 | ✔ | Cybersecurity on Medium | https://medium.com/feed/tag/cybersecurity | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 9 | download.sysinternals.com |
|
| Details | Domain | 2 | procdump.zip |
|
| Details | Domain | 251 | system.io |
|
| Details | Domain | 2 | keepassprocess.id |
|
| Details | Domain | 368 | system.net |
|
| Details | Domain | 5 | filestream.read |
|
| Details | Domain | 51 | file.read |
|
| Details | Domain | 1 | stream2dmp.py |
|
| Details | Domain | 4703 | github.com |
|
| Details | Domain | 1 | file-1693277727739.zip |
|
| Details | Domain | 202 | readme.md |
|
| Details | Domain | 22 | poc.py |
|
| Details | Domain | 1 | decpass.py |
|
| Details | Domain | 1 | wordlist.py |
|
| Details | Domain | 1 | keepass-pwn.sh |
|
| Details | Domain | 1 | keepass4brute.sh |
|
| Details | File | 1 | xxxmmdcclxxxiv.ps1 |
|
| Details | File | 1 | c:\tools\procdump.exe |
|
| Details | File | 9 | download.sys |
|
| Details | File | 2 | procdump.zip |
|
| Details | File | 1 | 'procdump.zip |
|
| Details | File | 1 | '1337.dmp |
|
| Details | File | 1 | '539.dmp |
|
| Details | File | 1 | dump_1337.raw |
|
| Details | File | 1 | 'dump_1337.raw |
|
| Details | File | 1 | 'output_1337.dmp |
|
| Details | File | 1 | stream2dmp.py |
|
| Details | File | 1 | output_1337.dmp |
|
| Details | File | 2 | qc.doc |
|
| Details | File | 1 | file-1693277727739.zip |
|
| Details | File | 2 | myra-security-in-a-nutshell.pdf |
|
| Details | File | 3 | conv.pdf |
|
| Details | File | 21 | poc.py |
|
| Details | File | 1 | decpass.py |
|
| Details | File | 1 | wordlist.py |
|
| Details | File | 57 | wordlist.txt |
|
| Details | Github username | 1 | matro7sh |
|
| Details | Github username | 1 | r3nt0n |
|
| Details | md5 | 1 | f9723177263da65ffdac74ffbf8d06a4 |
|
| Details | Url | 2 | https://download.sysinternals.com/files/procdump.zip |
|
| Details | Url | 1 | https://github.com/matro7sh/keepass-dump-masterkey.git |
|
| Details | Url | 1 | https://github.com/r3nt0n/keepass4brute |