Net Crawler

MITRE

Malware Type:
Other

First seen:
Unknown

Last seen:
Unknown

Details:

[Net Crawler](https://attack.mitre.org/software/S0056) is an intranet worm capable of extracting credentials using credential dumpers and spreading to systems on a network over SMB by brute forcing accounts with recovered passwords and using [PsExec](https://attack.mitre.org/software/S0029) to execute a copy of [Net Crawler](https://attack.mitre.org/software/S0056). (Citation: Cylance Cleaver)

Associated Techniques (4)

ID	ATT&CK	Tactics
T1003.001	LSASS Memory	-
T1021.002	SMB/Windows Admin Shares	-
T1110.002	Password Cracking	-
T1569.002	Service Execution	-

Aliases (105)

NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC NetC

Used by Actors (1)

Cleaver
Nation-state

Metadata

ID:	688
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00