Free scan↗
  • English
  • Deutsch

Medusa Group

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Medusa Group

02

resolved ATT&CK groups

Threat groups associated with this.

  • G1051Medusa Group
03

techniques used (57)

ATT&CK techniques this enables or maps to.

  • T1003.001LSASS Memory
  • T1003.003NTDS
  • T1016System Network Configuration Discovery
  • T1018Remote System Discovery
  • T1021.001Remote Desktop Protocol
  • T1027.002Software Packing
  • T1027.010Command Obfuscation
  • T1033System Owner/User Discovery
  • T1046Network Service Discovery
  • T1047Windows Management Instrumentation
  • T1057Process Discovery
  • T1059.001PowerShell
  • T1059.003Windows Command Shell
  • T1069.002Domain Groups
  • T1070.003Clear Command History
  • T1070.004File Deletion
  • T1071.001Web Protocols
  • T1072Software Deployment Tools
  • T1078Valid Accounts
  • T1082System Information Discovery
showing 20 of 57
04

software used (5)

Malware and tools associated with this.

  • S1244Medusa Ransomware
  • S0002Mimikatz
  • S0029PsExec
  • S1040Rclone
  • S0160certutil
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…