Record · corpus.blog/posts/01a087dd-ac7d-72ff-a9ef-a79c02a6600b

A Quick Dip into MuddyWater's Recent Activity

sec0wn.blogspot.com · published 1 March 2018

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sec0wn.blogspot.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 21
Words captured: 2,941

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://sec0wn.blogspot.ae/2018/02/burping-on-muddywater.html

sec0wn.blogspot.ae

https://www.virustotal.com/

virustotal.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzGfE5XpfEVU8T-THsSiNRge2LWeNS6kuam1bJjc3u_jxO-qV_C4Se0dL9rc8x-omgoxopq3abUqeHK4mMfDQEIC7_qYuHs7idOVG2QziuWPIN1Gtvg8GKAZAikIDbPFiFiANY8WLNUgp6/s1600/idrbt.png

blogger.googleusercontent.com

https://gist.github.com/NickTyrer/bbd10d20a5bb78f64a9d13f399ea0f80

gist.github.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyBmYeB04ggyxpRMG3E4qQIU8UTt9RJugBZX6ldSMXHR5FfjiXKvo_WRglZBRQ3NRiwwONmApIVoDCKtfB7GaUvSvpCVYDhZ9q9IbdDXCxUYo6kcNax5rB_AyM4qt6qRjQGKjAC88oYLO7/s1600/scriptlet+deocded.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2zEVkv3I05ygHTM0WVOAkUDP0S4U5wZvKeVBzI6g_wb7eB6ltfat6mOlQdyGEueDQlUze67T7ClAilpgbhVJ8pYip2iF2yQLaDyvfAbFBs3IIXKlbnfEENDH3PnCGk8PWaUtOzTx3bjQu/s1600/encoded+base64.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgS7P6AJDfQ7_9F1b7Je3oqEdYZldVajSyEoRYO3nmYnIxQKoFk2RFr1_trMPlsbGErgwQYZZVzyzGVIWmBvrKE2xdLZ1Lo7uBUGb1Rug2bV1xFs8JvCkpa_A8ba_WhNrhE1cZwFhV63_pH/s1600/encoded+PS.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFflY5TbYeZdqirtKyw3m_uzJYUt5B7wkHr1v5NZHwsCtdUVPM21YUxTtssPN8vXgzOBZYH23WoZXRubVgtfTtF_-w2W0pbyxkeDvppqFDvWOa7TzRzr18KRBXSp-Z2whJs5-K_sSVoBgA/s1600/PS+Dragon.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir0dn7BIHklOs6LdGbDM8a5bAj7i1XmvXV75dQtX2sPYVUraesGO-vNv4baXS7B5FWD_iuLNIiH06iVmXZhgvqy8yt-7aFUjGsWnprtJWkIJqW9UNP9FG1W6JmrRymFOUn6rwJ8KyD1vko/s1600/Kill+command.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOaJ7EXmDCBzpPx260ZL1GLbtC4uJkz6_yl3ewNLMARXcJWTCLyaMwfDVrFwXFNvThpT69HL801kdfCwHf1gO-s6ASBxMBFapkS0Eg2r-FUJCsS2uKAyW-jXhMufAI4TL97vxvPfeNjNjN/s1600/msgEnc.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPyBENRsFuZ3XJyUqX277apWGMgYLp29wDYNVdAEOVdzSco46h1V29wjbDScd6mQSNt8vVKtwZe9hE-Esoh-8eHBUzCRZdg4TGVnXOhdMcgTBwMozgVPDJVf2vHcP0IWyc7qyR2-rQlkje/s1600/randomURL.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhd63sTdBtOm3Ey8M7bmJSvl86FcYGZ9BzhyMy2HGClgMdU22tyr-ZKWArdYGJ_QJVyT6kz3gCk2KsheubzYtxrPYyXAuR5BPZ4E1kp3rAsCPw21Xw8leJoLBDnmX9QAF2JmH-V_6aot_GL/s1600/screenshot+command.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPvc3v6jyG5gfiawYUy1SVIGqQIcANOlWQ2ZTzPnKF27kPb9tzskUNUiHYbRc-QdsBNzxLla9Ekf6hAF7e0OcCqRRznzYrZoaUNzgE6D5A5-CEiR1ZeAKIAovo5bg4ZeJcvGBUIFkdUTsT/s1600/Persistance.PNG

blogger.googleusercontent.com

https://www.cybereason.com/blog/leveraging-excel-dde-for-lateral-movement-via-dcom

cybereason.com

https://enigma0x3.net/2017/11/16/lateral-movement-using-outlooks-createobject-method-and-dotnettojscript/

enigma0x3.net

https://github.com/rvrsh3ll/Misc-Powershell-Scripts/blob/master/Invoke-DCOM.ps1

github.com

https://enigma0x3.net/2017/01/23/lateral-movement-via-dcom-round-2/

enigma0x3.net

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLIHLbrxSAggSsDB7XQcTR8dXzQTyCd20Dml88IgDs-InTafY5t5qcCTOYCBXJTSUL09jFBZpBoqoXnFKUDfr1IAtAfhZfsWj6ZHgxdj_0yDJJ5u1b_3nyO-66JraTpZ2QHZ_0KzHQWZrx/s1600/Lateral+Movement.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiplsQCj9MwZn2wrrDcnKzXclkLSbzpLT6W7NyLBNvx7nsLOOu9EDe6rgYxI5dhzvuOOHEd7h_SRUi73Dzgky3ZM7VC4Zm7h2B4dfaSCTM_VcdMOHsWvtTLffjlrMKSrw7i6j1bJ0tjzslW/s1600/Sleep+and+Anti+Analysis.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHmkReP5C2d_jqw9J9Z_E-HokI4cTlxCEUGT3O2U-JqxeBugYS1UKTA6qx84uZPh4-MZnNdjweqJTz-82GIMX0Dm-0VAfkZRq5kY31Wuqy0ISrxaYCbbsDLbVgDru5QOZsATXPkC7ZWDP3/s1600/Upload.PNG

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizQN_08idE7jXx20ZClT4RSt0-rCdG5SDUVL6Fab3x0DQU3xdhggvRvn0u5Z1zd_4COEsIZsoa3O9_oaD4epR6oPcs0TnKM_7A0n5xZA-pm_37cthltTlBEin6ZMCboZFMxhTc0JGg10EU/s1600/Enc+C%2526C.PNG

blogger.googleusercontent.com