TA505

Techniques (MITRE ATT&CK)34

SourceMITRE ATT&CK

Also known as:Hive0065Spandex TempestCHIMBORAZO

Vexday analysis

TA505 é um grupo cibercriminoso ativo desde pelo menos 2014, também rastreado como Hive0065, Spandex Tempest e CHIMBORAZO (identificador MITRE ATT&CK: G0092). O grupo é reconhecido pela frequente troca de malware, por influenciar tendências globais na distribuição de malware criminoso e por campanhas de ransomware associadas ao Clop. Ao todo, 34 técnicas MITRE ATT&CK estão documentadas em seu perfil operacional.

Techniques (MITRE ATT&CK) 34

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Resource development

Domains Malware Tool Upload Malware

Initial access

Spearphishing Attachment Spearphishing Link

Execution

PowerShell Windows Command Shell Visual Basic JavaScript Native API Malicious Link Malicious File Dynamic Data Exchange

Credential access

Credentials In Files Credentials from Web Browsers

Discovery

Permission Groups Discovery Email Account

Command and control

Web Protocols Ingress Tool Transfer Fast Flux DNS

Impact

Data Encrypted for Impact

defense-impairment

Modify Registry Code Signing Mark-of-the-Web Bypass Disable or Modify Tools

stealth

Software Packing Command Obfuscation Encrypted/Encoded File Dynamic-link Library Injection Domain Accounts Deobfuscate/Decode Files or Information Msiexec Rundll32

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

TA505 uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →