Free scan↗
  • English
  • Deutsch

Velvet Ant

threat actor
01

also known as

Other names and identifiers for this entity.

ATT&CK

Velvet Ant

02

resolved ATT&CK groups

Threat groups associated with this.

  • G1047Velvet Ant
03

techniques used (22)

ATT&CK techniques this enables or maps to.

  • T1021.002SMB/Windows Admin Shares
  • T1036.005Match Legitimate Resource Name or Location
  • T1037.004RC Scripts
  • T1040Network Sniffing
  • T1047Windows Management Instrumentation
  • T1049System Network Connections Discovery
  • T1055Process Injection
  • T1059.004Unix Shell
  • T1071Application Layer Protocol
  • T1078.003Local Accounts
  • T1083File and Directory Discovery
  • T1090.001Internal Proxy
  • T1132Data Encoding
  • T1133External Remote Services
  • T1211Exploitation for Stealth
  • T1569.002Service Execution
  • T1570Lateral Tool Transfer
  • T1571Non-Standard Port
  • T1573.002Asymmetric Cryptography
  • T1574.001DLL
showing 20 of 22
04

software used (2)

Malware and tools associated with this.

  • S0357Impacket
  • S0013PlugX
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…