Initial: VPN credentials or DNS/TCP stager connection inside.
Privileges: Domain admin (+3 already dumped hashes (you can just PtH)), Access to the whole AWS infrastructure, credential to several databases / SSH private keys.
Accounts: All domain users (hashes dumped from DC)
Revenue: 10kk+
Country: South America
Industry: Food / Essential Services
AV: Kaspersky (we have the AV credentials, so you can just stop it)
Contact:
Tox: C308A65FDF6324610791D5A192747C3ED5FAEB71F01BA8423444409D5E9A597C1F5AFDBD5525
Price: 15000$ or negotiable:
Proof: Output from BloodHound.
Proof: Enumerating AWS with Pacu.
They have +35 selling points (supermarkets) / multiple business partners (third part) envs and access to VPN's.
Proof: Access to VPN inside one of the business partner network.
NOTE: This access is not for amateurs, if you don't knowledge and notion on what to do inside and how, accessing via command line and etc, don't even bother sending messages.
As a complex and mature network we had to pivot using different techniques and faced new scenarios, which required different stuff.
One of the associated bank accounts.
Outcomes:
Privileges: Domain admin (+3 already dumped hashes (you can just PtH)), Access to the whole AWS infrastructure, credential to several databases / SSH private keys.
Accounts: All domain users (hashes dumped from DC)
Revenue: 10kk+
Country: South America
Industry: Food / Essential Services
AV: Kaspersky (we have the AV credentials, so you can just stop it)
Contact:
Tox: C308A65FDF6324610791D5A192747C3ED5FAEB71F01BA8423444409D5E9A597C1F5AFDBD5525
Price: 15000$ or negotiable:
Proof: Output from BloodHound.
Proof: Enumerating AWS with Pacu.
They have +35 selling points (supermarkets) / multiple business partners (third part) envs and access to VPN's.
Proof: Access to VPN inside one of the business partner network.
NOTE: This access is not for amateurs, if you don't knowledge and notion on what to do inside and how, accessing via command line and etc, don't even bother sending messages.
As a complex and mature network we had to pivot using different techniques and faced new scenarios, which required different stuff.
One of the associated bank accounts.
Outcomes:
