A domain administrator downloads a “free” file-downloader to a Tier 0 asset. It carries a backdoor RAT.
Run it as Red Team to watch one click collapse the domain — or flip to Blue Team to watch each control break the chain.
Domain Threat Level
NOMINAL
👤 Actor: Domain Admin · interactive logon
🖥 Host: EXCH01· TIER 0
📦 Payload: SpeedDownloader.exe · trojanized
🎯 Objective: Domain dominance → impact
Attack Kill-Chain — click any stage to jump9 stages · 2 hours compressed