Net Crawler — Malware Profile

Net Crawler is an intranet worm capable of extracting credentials using credential dumpers and spreading to systems on a network over SMB by brute forcing accounts with recovered passwords and using PsExec to execute a copy of Net Crawler.

MITRE ATT&CK techniques (4)

• T1003.001 LSASS Memory
• T1021.002 SMB/Windows Admin Shares
• T1110.002 Password Cracking
• T1569.002 Service Execution

Attributed threat actors

• Cleaver

Read the full analysis on IntelFusions