Free scan↗
  • English
  • Deutsch

Blue Mockingbird

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Blue Mockingbird

02

resolved ATT&CK groups

Threat groups associated with this.

  • G0108Blue Mockingbird
03

techniques used (22)

ATT&CK techniques this enables or maps to.

  • T1003.001LSASS Memory
  • T1021.001Remote Desktop Protocol
  • T1021.002SMB/Windows Admin Shares
  • T1027.013Encrypted/Encoded File
  • T1036.005Match Legitimate Resource Name or Location
  • T1047Windows Management Instrumentation
  • T1053.005Scheduled Task
  • T1059.001PowerShell
  • T1059.003Windows Command Shell
  • T1082System Information Discovery
  • T1090Proxy
  • T1112Modify Registry
  • T1134Access Token Manipulation
  • T1190Exploit Public-Facing Application
  • T1218.010Regsvr32
  • T1218.011Rundll32
  • T1496.001Compute Hijacking
  • T1543.003Windows Service
  • T1546.003Windows Management Instrumentation Event Subscription
  • T1569.002Service Execution
showing 20 of 22
04

software used (2)

Malware and tools associated with this.

  • S1144FRP
  • S0002Mimikatz
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…