Behavioral task
behavioral1
Sample
2a637a92a3698fbf4b28f64d8096fc6171efaeb1a44e4baf3e1c5f663fe712eb.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2a637a92a3698fbf4b28f64d8096fc6171efaeb1a44e4baf3e1c5f663fe712eb.pdf
Resource
win10v2004-20240226-en
General
-
Target
2a637a92a3698fbf4b28f64d8096fc6171efaeb1a44e4baf3e1c5f663fe712eb
-
Size
9.3MB
-
MD5
ea96f03d8346616ceefee92f419990e3
-
SHA1
44cf2b891cc9a2076a15435cbd10562ff780b227
-
SHA256
2a637a92a3698fbf4b28f64d8096fc6171efaeb1a44e4baf3e1c5f663fe712eb
-
SHA512
9f211b51b6c83833b23892c8892cb15e2a33d6c580ec577d3eb900534d7d404b7988d3539316ac0aa34f5dd3cef017b854776ccd92a64ed0dc10773d01b5d6dc
-
SSDEEP
98304:4zOdcXVt81g01QRyAwlud4Ic+AESPMDzUhSfqwrNGAebd/ybJfAWJd97v5bxMtvk:4cT1my2kFPsUhSxrqbd/ybJAkZ5bAk
Malware Config
Signatures
Files
-
2a637a92a3698fbf4b28f64d8096fc6171efaeb1a44e4baf3e1c5f663fe712eb.pdf
-
http://www.nostarch.com/
-
https://lccn.loc.gov/2017051237
-
https://nostarch.com/azure/
-
https://portal.msrc.microsoft.com/en-us/engage/pentest
-
https://portal.msrc.microsoft.com/en-us/engage/pentest#pentestterms
-
https://technet.microsoft.com/en-us/security/dn800983/
-
http://www.counterhack.net/permission_memo.html
-
https://manage.windowsazure.com/
-
https://portal.azure.com/
-
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/migration-classic-resource-manager-overview/
-
https://github.com/gentilkiwi/mimikatz/
-
https://github.com/PowerShellMafia/PowerSploit/
-
https://technet.microsoft.com/en-us/itpro/windows/keep-secure/credential-guard/
-
https://github.com/vanhauser-thc/thc-hydra/
-
https://www.thc.org/thc-hydra/
-
https://github.com/gentilkiwi/mimikatz/wiki/module-~-crypto/
-
https://docs.microsoft.com/en-us/windows-server/identity/securing-privileged-access/privileged-access-workstations/
-
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-privileged-identity-management-configure/
-
http://microsoftonline.com/
-
http://azure.com/
-
http://blog.cobaltstrike.com/2013/09/26/browser-pivoting-get-past-two-factor-auth/
-
https://cobaltstrike.com/help-browser-pivoting
-
https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication/
-
https://www.microsoft.com/web/downloads/platform.aspx
-
https://github.com/azure/azure-xplat-cli/
-
https://github.com/azure/azure-cli/
-
https://blogs.msdn.microsoft.com/powershell/2015/06/09/powershell-the-blue-team/
-
https://docs.microsoft.com/en-us/powershell/scripting/setup/winrmsecurity/
-
https://blogs.msdn.microsoft.com/powershell/2017/11/02/powershell-constrained-language-mode/
-
http://portal.azure.com/
-
http://manage.windowsazure.com/
-
https://msdn.microsoft.com/en-us/library/windows/desktop/aa388136(v=vs.85).aspx
-
http://gauravmantri.com/2012/09/14/about-windows-azure-publish-settings-file-and-how-to-create-your-own-publish-settings-file/
-
https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-overview-activity-logs/
-
https://docs.microsoft.com/en-us/azure/virtual-machines/virtual-machines-windows-sizes/
-
https://azure.microsoft.com/en-us/pricing/details/cloud-services/
-
https://www.shodan.io/
-
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-threat-detection/
-
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-manage-access-to-resources/
-
https://storagerm.blob.core.windows.net/container/file.txt?st=2017-04-09T01%3A00%3A00Z&se=2017-04-20T01%3A00%3A00Z&sp=r&sip=127.0.0.1-127.0.0.100&sig=7%2BwycBOdzx8IS4zhMcKNw7AHvnZlYwk8wXIqNtLEu4s%3D
-
https://docs.microsoft.com/en-us/azure/storage/storage-security-guide
-
https://docs.microsoft.com/en-us/rest/api/storageservices/enabling-storage-logging-and-accessing-log-data/
-
http://www.sleuthkit.org/
-
https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption/
-
http://www.oxid.it/cain.html
-
https://github.com/danielmiessler/SecLists/
-
https://lasec.epfl.ch/pub/lasec/doc/Oech03.pdf
-
https://hashcat.net/hashcat/
-
https://hashcat.net/wiki/
-
http://www.mitec.cz/wrr.html
-
https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html
-
http://tightvnc.net/
-
http://www.freerdp.com/
-
https://nmap.org/
-
https://docs.microsoft.com/en-us/azure/best-practices-network-security/
-
https://docs.microsoft.com/en-us/azure/security/azure-security-network-security-best-practices/
-
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-forced-tunneling/
-
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-sas#rights-required-for-service-bus-operations
-
https://github.com/paolosalvatori/ServiceBusExplorer/
-
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-secure-your-key-vault/
-
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-logging/
-
https://www.microsoft.com/en-us/download/details.aspx?id=45343
-
http://azweb8426.azurewebsites.net/
-
http://bkunaenk.azurewebsites.net/
-
https://mms.microsoft.com/
-
https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-oms-gateway/
-
https://github.com/azsk/DevOpsKit-docs/
-
https://feedback.azure.com/
- Show all
-