S0056Windows

S0056Net Crawler

Platforms
1
ATT&CK
14.1
References
2

Description

[Net Crawler](https://attack.mitre.org/software/S0056) is an intranet worm capable of extracting credentials using credential dumpers and spreading to systems on a network over SMB by brute forcing accounts with recovered passwords and using [PsExec](https://attack.mitre.org/software/S0029) to execute a copy of [Net Crawler](https://attack.mitre.org/software/S0056). (Citation: Cylance Cleaver)

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0056
  2. https://web.archive.org/web/20200302085133/https://www.cylance.com/content/dam/cylance/pages/operation-cleaver/Cylance_Operation_Cleaver_Report.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Netwalker
Software
NetTraveler
Software
Conficker
Software
Windows Credential Editor
Software
NanoCore
Software
Stuxnet
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.