Overview
overview
1Static
static
1Red Team O...oke.js
windows7-x64
1Red Team O...oke.js
windows10-2004-x64
1Red Team O... C#.js
windows7-x64
1Red Team O... C#.js
windows10-2004-x64
1Program.js
windows7-x64
1Program.js
windows10-2004-x64
1Red Team O...ead.js
windows7-x64
1Red Team O...ead.js
windows10-2004-x64
1Red Team O...ead.js
windows7-x64
1Red Team O...ead.js
windows10-2004-x64
1Red Team O...APC.js
windows7-x64
1Red Team O...APC.js
windows10-2004-x64
1Red Team O...ion.js
windows7-x64
1Red Team O...ion.js
windows10-2004-x64
1CreateRemo...ram.js
windows7-x64
1CreateRemo...ram.js
windows10-2004-x64
1CreateThre...ram.js
windows7-x64
1CreateThre...ram.js
windows10-2004-x64
1NtMapViewO...ram.js
windows7-x64
1NtMapViewO...ram.js
windows10-2004-x64
1QueueUserA...ram.js
windows7-x64
1QueueUserA...ram.js
windows10-2004-x64
1Red Team O...TW).js
windows7-x64
1Red Team O...TW).js
windows10-2004-x64
1Red Team O...es.vbs
windows7-x64
1Red Team O...es.vbs
windows10-2004-x64
1Red Team O...ons.js
windows7-x64
1Red Team O...ons.js
windows10-2004-x64
1Red Team O...tub.js
windows7-x64
1Red Team O...tub.js
windows10-2004-x64
1Red Team O...ion.js
windows7-x64
1Red Team O...ion.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Red Team Ops II/3. Windows APIs/12. MessageBox with DInvoke.js
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Red Team Ops II/3. Windows APIs/12. MessageBox with DInvoke.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Red Team Ops II/3. Windows APIs/7. CreateProcess in C#.js
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Red Team Ops II/3. Windows APIs/7. CreateProcess in C#.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Program.js
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
Program.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
Red Team Ops II/4. Process Injection/2. CreateThread.js
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
Red Team Ops II/4. Process Injection/2. CreateThread.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
Red Team Ops II/4. Process Injection/3. CreateRemoteThread.js
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
Red Team Ops II/4. Process Injection/3. CreateRemoteThread.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
Red Team Ops II/4. Process Injection/4. QueueUserAPC.js
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
Red Team Ops II/4. Process Injection/4. QueueUserAPC.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
Red Team Ops II/4. Process Injection/5. NtMapViewOfSection.js
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
Red Team Ops II/4. Process Injection/5. NtMapViewOfSection.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
CreateRemoteThread/Program.js
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
CreateRemoteThread/Program.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
CreateThread/Program.js
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
CreateThread/Program.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
NtMapViewOfSection/Program.js
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
NtMapViewOfSection/Program.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
QueueUserAPC/Program.js
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
QueueUserAPC/Program.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
Red Team Ops II/5. Defence Evasion/9. Event Tracing for Windows (ETW).js
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
Red Team Ops II/5. Defence Evasion/9. Event Tracing for Windows (ETW).js
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
Red Team Ops II/6. Attack Surface Reduction/2. Block Child Processes.vbs
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
Red Team Ops II/6. Attack Surface Reduction/2. Block Child Processes.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
Red Team Ops II/7. Windows Defender Application Control/7. Exploiting Vulnerable Applications.js
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
Red Team Ops II/7. Windows Defender Application Control/7. Exploiting Vulnerable Applications.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
Red Team Ops II/8. EDR Evasion/10. GetSyscallStub.js
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
Red Team Ops II/8. EDR Evasion/10. GetSyscallStub.js
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
Red Team Ops II/8. EDR Evasion/6. Hooking in Action.js
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
Red Team Ops II/8. EDR Evasion/6. Hooking in Action.js
Resource
win10v2004-20230703-en
General
-
Target
Red Team Ops II.zip
-
Size
74.3MB
-
MD5
f86a0969b1dd49009e786b01fc80f1e0
-
SHA1
d96beeb9daf6324041e4de3521d26c171f8fb9a6
-
SHA256
b8d08663a369739176e3fc03807fea96b3f0adc8880b5e5597f552d81646cf28
-
SHA512
a25f4caafa2ba0598cbd1097d52799df7c0281576448fa10b7b2ff6968175d95d3dddf8d51070866575ae5fc92303ebc7285933e46656fba693df0589402545d
-
SSDEEP
1572864:lDHGqWvaTJ3ZqxVLUou0IofkKqLAQzAaffN1zJYk6+2v:VHvWvaTJ4xVLZZfd3cAwNJJYA2v
Malware Config
Signatures
Files
-
Red Team Ops II.zip.zip
Password: pwn3rw
-
Red Team Ops II/.obsidian/app.json
-
Red Team Ops II/.obsidian/appearance.json
-
Red Team Ops II/.obsidian/core-plugins.json
-
Red Team Ops II/.obsidian/hotkeys.json
-
Red Team Ops II/.obsidian/workspace
-
Red Team Ops II/1. Course Introduction.png.png
-
Red Team Ops II/1. Getting Started/1. Course Introduction.md
-
Red Team Ops II/1. Getting Started/2. Accessing Snap Labs.md
-
Red Team Ops II/1. Getting Started/3. Getting Support.md
-
Red Team Ops II/1. Getting Started/6. Infrastructure Design.png.png
-
Red Team Ops II/1. Getting Started/7. Infrastructure Design.png.png
-
Red Team Ops II/10. HTTPS Listener for Redirector.png.png
-
Red Team Ops II/11. User Agent Rules.png.png
-
Red Team Ops II/12. C2 Resiliency.png.png .ps1
-
Red Team Ops II/13. C2 Resiliency.png.png
-
Red Team Ops II/14. External C2.png.png
-
Red Team Ops II/15. External C2.png.png
-
Red Team Ops II/16. MessageBox in C++.png.png
-
Red Team Ops II/17. MessageBox in C++.png.png
-
Red Team Ops II/18. MessageBox in C_.png.png
-
Red Team Ops II/19. Ordinals.png.png
-
Red Team Ops II/2. Accessing Snap Labs.png.png
-
Red Team Ops II/2. C2 Infrastructure/1. Defence in Depth.md
-
Red Team Ops II/2. C2 Infrastructure/10. User Agent Rules.md
-
Red Team Ops II/2. C2 Infrastructure/11. Cookie Rules.md
-
Red Team Ops II/2. C2 Infrastructure/12. URI & Query Rules.md
-
Red Team Ops II/2. C2 Infrastructure/13. cs2modrewrite.md
-
Red Team Ops II/2. C2 Infrastructure/14. C2 Resiliency.md
-
Red Team Ops II/2. C2 Infrastructure/15. Beacon Staging.md
-
Red Team Ops II/2. C2 Infrastructure/16. External C2.md
-
Red Team Ops II/2. C2 Infrastructure/2. Infrastructure Design.md
-
Red Team Ops II/2. C2 Infrastructure/3. Apache Installation.md
-
Red Team Ops II/2. C2 Infrastructure/4. Generate SSL Certificates.md
-
Red Team Ops II/2. C2 Infrastructure/5. Java KeyStore.md
-
Red Team Ops II/2. C2 Infrastructure/6. HTTPS Listener for Redirector.md
-
Red Team Ops II/2. C2 Infrastructure/7. SSH Tunnel.md
-
Red Team Ops II/2. C2 Infrastructure/8. autossh.md
-
Red Team Ops II/2. C2 Infrastructure/9. Enabling htaccess.md
-
Red Team Ops II/2. C2 Infrastructure/Apache SSL Demo.mp4
-
Red Team Ops II/2. C2 Infrastructure/C2 Resiliency Demo.mp4
-
Red Team Ops II/2. C2 Infrastructure/Java KeyStore Demo.mp4
-
Red Team Ops II/20. Ordinals.png.png
-
Red Team Ops II/21. MessageBox in VBA.png.png
-
Red Team Ops II/22. DInvoke.png.png
-
Red Team Ops II/23. MessageBox with DInvoke.png.png
-
Red Team Ops II/24. CreateThread.png.png
-
Red Team Ops II/25. CreateRemoteThread.png.png
-
Red Team Ops II/26. QueueUserAPC.png.png
-
Red Team Ops II/27. NtMapViewOfSection.png.png
-
Red Team Ops II/28. SpawnTo.png.png
-
Red Team Ops II/29. SpawnTo.png.png
-
Red Team Ops II/3. Accessing Snap Labs.png.png
-
Red Team Ops II/3. Windows APIs/1. WinAPI.md
-
Red Team Ops II/3. Windows APIs/10. CreateProcess in VBA.md
-
Red Team Ops II/3. Windows APIs/11. DInvoke.md
-
Red Team Ops II/3. Windows APIs/12. MessageBox with DInvoke.md.js
-
Red Team Ops II/3. Windows APIs/13. CreateProcess with DInvoke.md
-
Red Team Ops II/3. Windows APIs/2. MessageBox in C++.md
-
Red Team Ops II/3. Windows APIs/3. CreateProcess in C++.md
-
Red Team Ops II/3. Windows APIs/4. PInvoke.md
-
Red Team Ops II/3. Windows APIs/5. MessageBox in C#.md
-
Red Team Ops II/3. Windows APIs/6. Type Marshalling.md
-
Red Team Ops II/3. Windows APIs/7. CreateProcess in C#.md.js
-
Red Team Ops II/3. Windows APIs/8. Ordinals.md
-
Red Team Ops II/3. Windows APIs/9. MessageBox in VBA.md
-
Red Team Ops II/3. Windows APIs/CreateProcess_DInvoke.zip.zip
Password: pwn3rw
-
Program.cs.js
-
Win32.cs
-
Red Team Ops II/30. SpawnTo.png.png
-
Red Team Ops II/31. PPID Spoofing.png.png
-
Red Team Ops II/32. PPID Spoofing.png.png
-
Red Team Ops II/33. PPID Spoofing.png.png
-
Red Team Ops II/34. Command Line Spoofing.png.png
-
Red Team Ops II/35. Command Line Spoofing.png.png
-
Red Team Ops II/36. Command Line Spoofing.png.png
-
Red Team Ops II/37. Session Prepping.png.png
-
Red Team Ops II/38. Session Prepping.png.png
-
Red Team Ops II/39. Session Prepping.png.png
-
Red Team Ops II/4. Accessing Snap Labs.png.png
-
Red Team Ops II/4. Process Injection/1. Process Injection.md
-
Red Team Ops II/4. Process Injection/2. CreateThread.md.js
-
Red Team Ops II/4. Process Injection/3. CreateRemoteThread.md.js
-
Red Team Ops II/4. Process Injection/4. QueueUserAPC.md.js
-
Red Team Ops II/4. Process Injection/5. NtMapViewOfSection.md.js
-
Red Team Ops II/4. Process Injection/CreateRemoteThread Solution.zip.zip
Password: pwn3rw
-
CreateRemoteThread/Program.cs.js
-
CreateRemoteThread/Win32.cs
-
Red Team Ops II/4. Process Injection/CreateThread Solution.zip.zip
Password: pwn3rw
-
CreateThread/Program.cs.js
-
CreateThread/Win32.cs
-
Red Team Ops II/4. Process Injection/NtMapViewOfSection Solution.zip.zip
Password: pwn3rw
-
NtMapViewOfSection/Native.cs
-
NtMapViewOfSection/Program.cs.js
-
Red Team Ops II/4. Process Injection/QueueUserAPC Solution.zip.zip
Password: pwn3rw
-
QueueUserAPC/Program.cs.js
-
QueueUserAPC/Win32.cs
-
Red Team Ops II/40. Session Prepping.png.png
-
Red Team Ops II/41. Session Prepping.png.png
-
Red Team Ops II/42. Session Prepping.png.png
-
Red Team Ops II/43. Session Prepping.png.png
-
Red Team Ops II/44. Image Load Events.png.png
-
Red Team Ops II/45. Event Tracing for Windows (ETW).png.png
-
Red Team Ops II/46. Event Tracing for Windows (ETW).png.png
-
Red Team Ops II/47. RWX & Cleanup.png.png
-
Red Team Ops II/48. RWX & Cleanup.png.png
-
Red Team Ops II/49. RWX & Cleanup.png.png
-
Red Team Ops II/5. Accessing Snap Labs.png.png
-
Red Team Ops II/5. Defence Evasion/1. Post-Exploitation Behaviours.md
-
Red Team Ops II/5. Defence Evasion/10. RWX & Cleanup.md
-
Red Team Ops II/5. Defence Evasion/11. Sleep Mask Kit.md
-
Red Team Ops II/5. Defence Evasion/12. Thread Stack Spoofing.md
-
Red Team Ops II/5. Defence Evasion/2. SpawnTo.md
-
Red Team Ops II/5. Defence Evasion/3. PPID Spoofing.md
-
Red Team Ops II/5. Defence Evasion/4. Command Line Spoofing.md
-
Red Team Ops II/5. Defence Evasion/5. Network Connections.md
-
Red Team Ops II/5. Defence Evasion/6. Session Prepping.md
-
Red Team Ops II/5. Defence Evasion/7. Image Load Events.md
-
Red Team Ops II/5. Defence Evasion/8. Named Pipes Names.md
-
Red Team Ops II/5. Defence Evasion/9. Event Tracing for Windows (ETW).md.js
-
Red Team Ops II/50. Sleep Mask Kit.png.png
-
Red Team Ops II/51. Sleep Mask Kit.png.png
-
Red Team Ops II/52. Sleep Mask Kit.png.png
-
Red Team Ops II/53. Sleep Mask Kit.png.png
-
Red Team Ops II/54. Thread Stack Spoofing.png.png
-
Red Team Ops II/55. Thread Stack Spoofing.png.png
-
Red Team Ops II/56. Thread Stack Spoofing.png.png
-
Red Team Ops II/57. Thread Stack Spoofing.png.png
-
Red Team Ops II/58. Thread Stack Spoofing.png.png
-
Red Team Ops II/59. Thread Stack Spoofing.png.png
-
Red Team Ops II/6. Attack Surface Reduction/1. Attack Surface Reduction.md
-
Red Team Ops II/6. Attack Surface Reduction/2. Block Child Processes.md.vbs
-
Red Team Ops II/6. Attack Surface Reduction/3. Block Win32 APIs.md
-
Red Team Ops II/6. Attack Surface Reduction/4. Block Code Injection.md
-
Red Team Ops II/6. Attack Surface Reduction/5. Block PsExecWMI.md
-
Red Team Ops II/6. Attack Surface Reduction/6. Block Credential Stealing from LSASS.md
-
Red Team Ops II/60. Thread Stack Spoofing.png.png
-
Red Team Ops II/61. Block Child Processes.png.png
-
Red Team Ops II/62. Block Child Processes.png.png
-
Red Team Ops II/63. Block Child Processes.png.png
-
Red Team Ops II/64. Block Child Processes.png.png
-
Red Team Ops II/65. Block Child Processes.png.png
-
Red Team Ops II/66. Block Child Processes.png.png
-
Red Team Ops II/67. Block Win32 APIs.png.png
-
Red Team Ops II/68. Block Win32 APIs.png.png
-
Red Team Ops II/69. Block Win32 APIs.png.png
-
Red Team Ops II/7. Windows Defender Application Control/1. Windows Defender Application Control.md
-
Red Team Ops II/7. Windows Defender Application Control/2. Living Off The Land Binaries, Scripts and Libraries.md
-
Red Team Ops II/7. Windows Defender Application Control/3. Wildcard FilePaths.md
-
Red Team Ops II/7. Windows Defender Application Control/4. User Modifiable Binaries.md
-
Red Team Ops II/7. Windows Defender Application Control/6. Trusted Signers.md
-
Red Team Ops II/7. Windows Defender Application Control/7. Exploiting Vulnerable Applications.md.js
-
Red Team Ops II/70. Block Code Injection.png.png
-
Red Team Ops II/71. Block Code Injection.png.png
-
Red Team Ops II/72. Block PsExecWMI.png.png
-
Red Team Ops II/73. Block PsExecWMI.png.png
-
Red Team Ops II/74. Block PsExecWMI.png.png
-
Red Team Ops II/75. Block PsExecWMI.png.png
-
Red Team Ops II/76. Trusted Applications.png.png
-
Red Team Ops II/77. Trusted Signers.png.png
-
Red Team Ops II/78. Trusted Signers.png.png
-
Red Team Ops II/79. Trusted Signers.png.png
-
Red Team Ops II/8. Apache Installation.png.png
-
Red Team Ops II/8. EDR Evasion/1. Endpoint Detection and Response.md
-
Red Team Ops II/8. EDR Evasion/10. GetSyscallStub.md.js
-
Red Team Ops II/8. EDR Evasion/100. Kernel Callbacks.png.png
-
Red Team Ops II/8. EDR Evasion/101. Kernel Callbacks.png.png
-
Red Team Ops II/8. EDR Evasion/102. Driver Signature Enforcement.png.png
-
Red Team Ops II/8. EDR Evasion/103. Driver Signature Enforcement.png.png
-
Red Team Ops II/8. EDR Evasion/11. SysWhispers.md
-
Red Team Ops II/8. EDR Evasion/12. Syscalls & ArtifactKit.md
-
Red Team Ops II/8. EDR Evasion/13. User Defined Reflective Loader.md
-
Red Team Ops II/8. EDR Evasion/14. Kernel Callbacks.md
-
Red Team Ops II/8. EDR Evasion/15. Driver Signature Enforcement.md
-
Red Team Ops II/8. EDR Evasion/2. Detecting the Bad.md
-
Red Team Ops II/8. EDR Evasion/3. IAT Hooking.md
-
Red Team Ops II/8. EDR Evasion/4. Inline Hooking.md
-
Red Team Ops II/8. EDR Evasion/5. Hook Bypass Strategies.md
-
Red Team Ops II/8. EDR Evasion/6. Hooking in Action.md.js
-
Red Team Ops II/8. EDR Evasion/7. Manual Mapping.md.js
-
Red Team Ops II/8. EDR Evasion/8. Process Mitigation Policy.md
-
Red Team Ops II/8. EDR Evasion/84. Endpoint Detection and Response.png.png
-
Red Team Ops II/8. EDR Evasion/85. IAT Hooking.png.png
-
Red Team Ops II/8. EDR Evasion/86. IAT Hooking.png.png
-
Red Team Ops II/8. EDR Evasion/87. IAT Hooking.png.png
-
Red Team Ops II/8. EDR Evasion/88. IAT Hooking.png.png
-
Red Team Ops II/8. EDR Evasion/89. IAT Hooking.png.png
-
Red Team Ops II/8. EDR Evasion/9. Syscalls.md
-
Red Team Ops II/8. EDR Evasion/90. Inline Hooking.png.png
-
Red Team Ops II/8. EDR Evasion/91. Inline Hooking.png.png
-
Red Team Ops II/8. EDR Evasion/92. Manual Mapping.png.png
-
Red Team Ops II/8. EDR Evasion/93. Process Mitigation Policy.png.png
-
Red Team Ops II/8. EDR Evasion/94. Syscalls.png.png
-
Red Team Ops II/8. EDR Evasion/95. Syscalls.png.png
-
Red Team Ops II/8. EDR Evasion/96. Syscalls.png.png
-
Red Team Ops II/8. EDR Evasion/97. GetSyscallStub.png.png
-
Red Team Ops II/8. EDR Evasion/98. SysWhispers.png.png
-
Red Team Ops II/8. EDR Evasion/99. Kernel Callbacks.png.png
-
Red Team Ops II/8. EDR Evasion/DInvokeSyscalls.zip.zip
Password: pwn3rw
-
DinvokeSyscalls.cs.js
-
Red Team Ops II/8. EDR Evasion/HookBypass-220307-102016.zip.zip
Password: pwn3rw
-
HookBypass.cs.js
-
Red Team Ops II/8. EDR Evasion/Syscalls & Artifact Kit Demo.mp4
-
Red Team Ops II/80. Trusted Signers.png.png
-
Red Team Ops II/81. Trusted Signers.png.png
-
Red Team Ops II/82. Trusted Signers.png.png
-
Red Team Ops II/83. Trusted Signers.png.png
-
Red Team Ops II/9. Generate SSL Certificates.png.png