Hide Navigation Hide TOC

PwnDrp Access (2b1ee7e4-89b6-4739-b7bb-b811b6607e5e)

Detects downloads from PwnDrp web servers developed for red team testing and most likely also used for criminal activity

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
PwnDrp Access (2b1ee7e4-89b6-4739-b7bb-b811b6607e5e)	Sigma-Rules	Dead Drop Resolver - T1102.001 (f7827069-0bf2-4764-af4f-23fae0d181b7)	Attack Pattern	1
PwnDrp Access (2b1ee7e4-89b6-4739-b7bb-b811b6607e5e)	Sigma-Rules	One-Way Communication - T1102.003 (9c99724c-a483-4d60-ad9d-7f004e42e8e8)	Attack Pattern	1
PwnDrp Access (2b1ee7e4-89b6-4739-b7bb-b811b6607e5e)	Sigma-Rules	Web Protocols - T1071.001 (df8b2a25-8bdf-4856-953c-a04372b1c161)	Attack Pattern	1
Web Service - T1102 (830c9528-df21-472c-8c14-a036bf17d665)	Attack Pattern	Dead Drop Resolver - T1102.001 (f7827069-0bf2-4764-af4f-23fae0d181b7)	Attack Pattern	2
Web Service - T1102 (830c9528-df21-472c-8c14-a036bf17d665)	Attack Pattern	One-Way Communication - T1102.003 (9c99724c-a483-4d60-ad9d-7f004e42e8e8)	Attack Pattern	2
Application Layer Protocol - T1071 (355be19c-ffc9-46d5-8d50-d6a036c675b6)	Attack Pattern	Web Protocols - T1071.001 (df8b2a25-8bdf-4856-953c-a04372b1c161)	Attack Pattern	2