Jump to content

Trojans and HackTool Issues Identified post payload update


Cole

Recommended Posts

Posted

I am just getting started with the Bash Bunny, and it's payloads... so pardon me... but should I be concerned with the "Threats" identified by Windows Defender when I updated the payloads using the auto updater?

I'm not sure if these are actually part of the payload that I need, or a potential nefarious attack on my or others system. Any comments would be appreciated. Thanks!

HackTool:PowerShell/Mimikatz.F

file: H:\.payload_repo\payloads\library\credentials\DumpCreds\PS\[email protected]

Trojan:PowerShell/Powersploit.H

file: H:\.payload_repo\payloads\library\exfiltration\browserData\Get-BrowserData.ps1

Trojan:PowerShell/Leivion.gen!B

file: H:\.payload_repo\payloads\library\remote_access\USB_Intruder\USB_Intruder\shell.bat

 

https://drive.google.com/open?id=1LKcwn3OMXgR0AtjSYlzjRCLjTGCFrHxS

Posted

AV will trigger because the payloads that are copied to the BB are tagged as bad by AVs.  Mimikatz is a password grabber bit is a payload for the BB to get passwords.  so, yelp it will trigger bit if you are using the updater from the official site then it will just be copying them to the BB.

 

If you are worried, you can always do the updating manually.

Posted

Not so much worried about the auto updater per se, I was more worried about the actual contents of some of the payloads, being a noob and all, and not knowing if those items were supposed to be in the files. Thanks for the clarification 🙂

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...