{ "metadata": { "encrypted": false }, "configuration": { "credentials_collectors": { "SSH": {} }, "payloads": { "ransomware": { "encryption": { "enabled": true, "file_extension": ".m0nk3y", "directories": { "linux_target_dir": "", "windows_target_dir": "" } }, "other_behaviors": { "readme": true } } }, "propagation": { "network_scan": { "targets": { "scan_my_networks": false, "subnets": [ "10.2.2.9", "10.2.1.10", "10.2.0.10", "10.2.0.11", "10.2.0.12", "10.2.3.14", "10.2.4.15", "10.2.5.16", "10.2.2.0-10.2.2.32", "10.2.3.30-10.2.3.56" ], "blocked_ips": [], "inaccessible_subnets": [] }, "icmp": { "timeout": 1 }, "tcp": { "ports": [ 22, 80, 135, 443, 445, 2222, 3306, 3389, 5985, 5986, 7001, 8008, 8080, 8088, 8983, 9600 ], "timeout": 0.8 }, "fingerprinters": [ { "name": "http", "options": {} }, { "name": "ssh", "options": {} } ] }, "exploitation": { "exploiters": { "Log4ShellExploiter": {}, "SSHExploiter": {}, "SMB": { "agent_binary_upload_timeout": 30, "smb_connect_timeout": 15 } }, "options": { "http_ports": [ 80, 443, 7001, 8008, 8080, 8983, 9600 ] } }, "maximum_depth": 3 }, "polymorphism": { "randomize_agent_hash": false }, "keep_tunnel_open_time": 20 }, "credentials": { "exploit_user_list": [ "m0nk3y" ], "exploit_email_list": [], "exploit_password_list": [ "3Q=(Ge(+&w]*", "`))jU7L(w}", "t67TC5ZDmz", "u26gbVQe", "5BuYHeVl" ], "exploit_lm_hash_list": [], "exploit_ntlm_hash_list": [ "d0f0132b308a0c4e5d1029cc06f48692", "5da0889ea2081aa79f6852294cba4a5e", "50c9987a6bf1ac59398df9f911122c9b" ], "exploit_ssh_keys": [] }, "masque_strings": { "linux": { "masque_texts": [], "masque_base64": "" }, "windows": { "masque_texts": [], "masque_base64": "" } } }