Free scan↗
  • English
  • Deutsch

BlackByte

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

BlackByte · Hecamede

02

resolved ATT&CK groups

Threat groups associated with this.

  • G1043BlackByte
03

techniques used (48)

ATT&CK techniques this enables or maps to.

  • T1003OS Credential Dumping
  • T1012Query Registry
  • T1016System Network Configuration Discovery
  • T1018Remote System Discovery
  • T1021.001Remote Desktop Protocol
  • T1021.002SMB/Windows Admin Shares
  • T1036.008Masquerade File Type
  • T1041Exfiltration Over C2 Channel
  • T1046Network Service Discovery
  • T1047Windows Management Instrumentation
  • T1053.005Scheduled Task
  • T1055Process Injection
  • T1055.012Process Hollowing
  • T1059.001PowerShell
  • T1059.003Windows Command Shell
  • T1068Exploitation for Privilege Escalation
  • T1070.004File Deletion
  • T1071.001Web Protocols
  • T1078Valid Accounts
  • T1078.002Domain Accounts
showing 20 of 48
04

software used (8)

Malware and tools associated with this.

  • S0552AdFind
  • S0099Arp
  • S1181BlackByte 2.0 Ransomware
  • S1180BlackByte Ransomware
  • S0154Cobalt Strike
  • S1179Exbyte
  • S0002Mimikatz
  • S0029PsExec
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…