Free scan↗
  • English
  • Deutsch

Higaisa

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Higaisa

02

resolved ATT&CK groups

Threat groups associated with this.

  • G0126Higaisa
03

techniques used (28)

ATT&CK techniques this enables or maps to.

  • T1001.003Protocol or Service Impersonation
  • T1016System Network Configuration Discovery
  • T1027.001Binary Padding
  • T1027.013Encrypted/Encoded File
  • T1027.015Compression
  • T1029Scheduled Transfer
  • T1036.004Masquerade Task or Service
  • T1041Exfiltration Over C2 Channel
  • T1053.005Scheduled Task
  • T1057Process Discovery
  • T1059.003Windows Command Shell
  • T1059.005Visual Basic
  • T1059.007JavaScript
  • T1071.001Web Protocols
  • T1082System Information Discovery
  • T1090.001Internal Proxy
  • T1106Native API
  • T1124System Time Discovery
  • T1140Deobfuscate/Decode Files or Information
  • T1203Exploitation for Client Execution
showing 20 of 28
04

software used (3)

Malware and tools associated with this.

  • S0013PlugX
  • S0160certutil
  • S0032gh0st RAT
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…