Free scan↗
  • English
  • Deutsch

Saint Bear

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Lorec53 · Saint Bear · Storm-0587 · TA471 · UAC-0056

02

resolved ATT&CK groups

Threat groups associated with this.

  • G1031Saint Bear
03

techniques used (18)

ATT&CK techniques this enables or maps to.

  • T1027.002Software Packing
  • T1027.013Encrypted/Encoded File
  • T1059Command and Scripting Interpreter
  • T1059.001PowerShell
  • T1059.003Windows Command Shell
  • T1059.007JavaScript
  • T1112Modify Registry
  • T1203Exploitation for Client Execution
  • T1204.001Malicious Link
  • T1204.002Malicious File
  • T1497Virtualization/Sandbox Evasion
  • T1553.002Code Signing
  • T1566.001Spearphishing Attachment
  • T1583.006Web Services
  • T1589.002Email Addresses
  • T1608.001Upload Malware
  • T1684.001Impersonation
  • T1685Disable or Modify Tools
04

software used (2)

Malware and tools associated with this.

  • S1017OutSteel
  • S1018Saint Bot
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…