Free scan↗
  • English
  • Deutsch

Storm-0501

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Storm-0501

02

resolved ATT&CK groups

Threat groups associated with this.

  • G1053Storm-0501
03

techniques used (42)

ATT&CK techniques this enables or maps to.

  • T1003OS Credential Dumping
  • T1003.006DCSync
  • T1021.006Windows Remote Management
  • T1021.007Cloud Services
  • T1027.002Software Packing
  • T1036.004Masquerade Task or Service
  • T1053.005Scheduled Task
  • T1057Process Discovery
  • T1059.001PowerShell
  • T1059.009Cloud API
  • T1078.004Cloud Accounts
  • T1082System Information Discovery
  • T1087.002Domain Account
  • T1087.004Cloud Account
  • T1098.001Additional Cloud Credentials
  • T1098.003Additional Cloud Roles
  • T1110Brute Force
  • T1190Exploit Public-Facing Application
  • T1218.010Regsvr32
  • T1218.011Rundll32
showing 20 of 42
04

software used (8)

Malware and tools associated with this.

  • S0677AADInternals
  • S0154Cobalt Strike
  • S1247Embargo
  • S0357Impacket
  • S0039Net
  • S0359Nltest
  • S1040Rclone
  • S0057Tasklist
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…