Free scan↗
  • English
  • Deutsch

Play

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Play

02

resolved ATT&CK groups

Threat groups associated with this.

  • G1040Play
03

techniques used (26)

ATT&CK techniques this enables or maps to.

  • T1003.001LSASS Memory
  • T1016System Network Configuration Discovery
  • T1018Remote System Discovery
  • T1021.002SMB/Windows Admin Shares
  • T1027.010Command Obfuscation
  • T1030Data Transfer Size Limits
  • T1048Exfiltration Over Alternative Protocol
  • T1057Process Discovery
  • T1059.001PowerShell
  • T1059.003Windows Command Shell
  • T1070.004File Deletion
  • T1078Valid Accounts
  • T1078.002Domain Accounts
  • T1078.003Local Accounts
  • T1082System Information Discovery
  • T1083File and Directory Discovery
  • T1105Ingress Tool Transfer
  • T1133External Remote Services
  • T1190Exploit Public-Facing Application
  • T1518.001Security Software Discovery
showing 20 of 26
04

software used (9)

Malware and tools associated with this.

  • S0552AdFind
  • S0521BloodHound
  • S0154Cobalt Strike
  • S0363Empire
  • S0002Mimikatz
  • S0359Nltest
  • S1162Playcrypt
  • S0029PsExec
  • S0645Wevtutil
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…