AccountRestore (6bc29df2-195e-410c-ad08-f3661575492f)
AccountRestore is a .NET executable that is used to brute force Active Directory accounts. The tool searches for a list of specific users and attempts to brute force the accounts based on a password file provided by the user.[Security Joes Sockbot March 09 2022]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| FIN12 (6d6ed42c-760c-4964-a81e-1d4df06a8800) | Tidal Groups | AccountRestore (6bc29df2-195e-410c-ad08-f3661575492f) | Tidal Software | 1 |