ADExplorer64.exe

Reported Context (1)

the threat actor was seen authenticating to a user account separate from adminbak2 and running ADExplorer64.exe from that account, as well as domain enumeration commands (C:\Windows\system32\net1 group "domain Huntress Details Three Intrusions Abusing Velociraptor for Command-and-Control

CVE (5)

Malware (1)

People (7)

Threat Actors (1)

MITRE ATT&CK (10)

Vendors (1)

Products (10)

Tools (1)

Industries (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.