[New WTFBin]: Silver Bullet Technology's Ranger runs a Bloodhound.exe

mttaggart / wtfbins

WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.

MIT License

142 stars 10 forks source link

Closed Purp1eW0lf closed 2 years ago

Purp1eW0lf commented 2 years ago

Contributor Name: Dray Agha @purp1ew0lf
Application/Executable: Bloodhound.exe (C:\Program Files (x86)\Silver Bullet Technology\Ranger\Logging\Bloodhound.exe)
WTF Behavior Description: Silver Bullet Technology's Ranger runs an executable called Bloodhound.exe. It doesn't appear to be SpecterOps's Bloodhound tool for Active Directory mapping, it merely shares a namesake.
Link to Documentation of Behavior: Referenced here and here

HuskyHacks commented 2 years ago

cracking up over here

Purp1eW0lf commented 2 years ago

Couldn’t make it up 😂😒

mttaggart commented 2 years ago

Absolute banger. Added in 4b5b25e56c71c539dec1dbdbc3bab2c769075f31.