Free scan↗
  • English
  • Deutsch

Storm-1811

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Storm-1811

02

resolved ATT&CK groups

Threat groups associated with this.

  • G1046Storm-1811
03

techniques used (31)

ATT&CK techniques this enables or maps to.

  • T1021.002SMB/Windows Admin Shares
  • T1021.004SSH
  • T1027.013Encrypted/Encoded File
  • T1033System Owner/User Discovery
  • T1036Masquerading
  • T1036.005Match Legitimate Resource Name or Location
  • T1036.010Masquerade Account Name
  • T1048.002Exfiltration Over Asymmetric Encrypted Non-C2 Protocol
  • T1056Input Capture
  • T1059.001PowerShell
  • T1059.003Windows Command Shell
  • T1074.001Local Data Staging
  • T1087.002Domain Account
  • T1105Ingress Tool Transfer
  • T1140Deobfuscate/Decode Files or Information
  • T1204.002Malicious File
  • T1219.002Remote Desktop Software
  • T1222.001Windows Permissions
  • T1482Domain Trust Discovery
  • T1486Data Encrypted for Impact
showing 20 of 31
04

software used (7)

Malware and tools associated with this.

  • S0190BITSAdmin
  • S1070Black Basta
  • S0154Cobalt Strike
  • S0357Impacket
  • S0029PsExec
  • S0650QakBot
  • S1209Quick Assist
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…