Threat Arsenal

lockbit3 Team (51 herramientas)

Action1 AdFind Advanced IP Scanner Advanced Port Scanner Anonfiles AnyDesk BCDEdit Backstab (Process Explorer driver)Bloodhound Cobalt Strike Defender Control FileZilla File[.]io FixMeIt FreeFileSync GMER Gosecretsdump Impacket Koadic LaZagne Ligolo LostMyPassword MEGA Metasploit Mimikatz Ngrok NirSoft ExtPassword PCHunter PasswordFox Plink PowerShell Empire PowerTool ProcDump ProcessHacker PsExec RClone ScreenConnect Seatbelt Sendspace SoftPerfect NetScan Splashtop TDSSKiller TeamViewer Temp[.]sh Tempsend ThunderShell Transfer[.]sh Transfert-my-files Veeam-Get-Creds WinSCP ZohoAssist

akira Team (42 herramientas)

Advanced IP Scanner Advanced Port Scanner AnyDesk Bloodhound Cloudflared CrackMapExec DonPAPI FileZilla Impacket LaZagne MEGA Masscan MeshAgent Mimikatz MobaXterm NetExec Ngrok OpenSSH PowerTool RClone Radmin ReconFTW RustDesk ShareFinder SharpHound SharpShares SoftPerfect NetScan TeamViewer Temp[.]sh ThrottleStop driver WinRAR WinSCP Zemana Anti-Rootkit driver churchill_driver.sys / fidget.sys consent.exe (msimg32.dll / wmsgapi.dll)icardagt.exe (version.dll DLL sideload)ldapdomaindump mfpmp.exe (rtworkq.dll DLL sideload)net netsh nltest vssadmin

blacksuit Team (36 herramientas)

7-Zip AccountRestore AdFind Advanced IP Scanner AnyDesk Atera Brute Ratel C4 Bublup Chisel Cloudflared Cobalt Strike Eraser GMER Inno Setup LogMeIn Mimikatz MobaXterm NTDS Utility (ntdsutil)NirSoft Dialupass NirSoft IEPassView (iepv)NirSoft MailPassView NirSoft Netpass NirSoft RouterPassView OpenSSH PowerShell PowerTool PsExec RClone Rubeus SharpHound SharpShares SoftPerfect NetScan Temp[.]sh VirtualBox WMIC attrib

thegentlemen Team (34 herramientas)

ADFind AnyDesk BloodHound Censys CertiHound Chisel-ng Custom Go Locker (Windows/Linux/NAS)DumpBrowserSecrets EDRStartupHinder GFreeze GLinker Hydra KslDump KslKatz MANSPIDER NetExec (nxc)PetitPotam PowerZure PrivHound ProxyChains RegPwn RelayKing Responder Shodan Tor / Onion C2 TrustedSec Titanis Velociraptor XenAllPasswordPro ZeroPulse gogo scanner ldapdomaindump ntlmrelayx openconnect rclone

conti Team (32 herramientas)

AdFind AnyDesk Atera BITSAdmin Bloodhound Cobalt Strike Dropfiles GMER MEGA Metasploit Meterpreter Mimikatz NTDS Utility (ntdsutil)PCHunter PowerShell Empire PowerSploit PowerView ProcDump PsExec Qaz[.]im RClone Router Scan Rubeus Seatbelt Sendspace ShareFinder SharpChrome SharpView SoftPerfect NetScan Splashtop WMIC WinSCP

ransomhub Team (32 herramientas)

Acronis Disk Director Angry IP Scanner AnyDesk Atera BITSAdmin BadRentdrv2 Cloudflared Cobalt Strike CrackMapExec FileZilla Impacket Kerbrute Metasploit Mimikatz N-Able NetExec Ngrok Nmap PSCP PsExec RClone Revo Uninstaller ScreenConnect Sliver SoftPerfect NetScan Splashtop Stowaway ThreatFire System Monitor driver (BYOVD)TightVNC WKTools WMIC WinSCP

medusa Team (27 herramientas)

Advanced IP Scanner AnyDesk Atera BITSAdmin Cloudflared EDRSandBlast FRP HCL BigFix KillAV Ligolo Mimikatz N-Able Navicat PDQ Deploy PDQ Inventory Process Explorer PsExec PuTTY RClone RevSocks RoboCopy ScreenConnect SimpleHelp SoftPerfect NetScan Splashtop ThrottleStop driver eHorus

royal Team (26 herramientas)

AdFind Advanced IP Scanner AnyDesk Atera Brute Ratel C4 Chisel Cloudflared Cobalt Strike Eraser GMER LogMeIn Mimikatz MobaXterm NSudo NirSoft Dialupass NirSoft IEPassView (iepv)NirSoft MailPassView NirSoft Netpass NirSoft RouterPassView OpenSSH PowerTool PsExec RClone SharpShares SoftPerfect NetScan Syncro

warlock (26 herramientas)

Antiy System In-Depth Analysis Toolkit driver (BYOVD)Azure Blog Storage Catbox[.]moe Cloudflared Cobalt Strike Everything.exe Mimikatz MinIO Minidump Msiexec NsecSoft driver (BYOVD)OpenSSH PowerShell Remoting (PSRemoting)PsExec RClone RDP Patcher Radmin Rising Antivirus driver (BYOVD)SecurityCheck Supabase TightVNC VMTools AV Killer (BYOVD)VS Code Tunnel Veeam-Get-Creds Velociraptor Yuze

qilin Team (25 herramientas)

Cobalt Strike EDRSandBlast EasyUpload.io Evilginx Kali Linux MEGA Mimikatz NetExec NetSupport Nmap Nping PCHunter PowerShell PowerTool Proxychains PsExec ScreenConnect SystemBC Tofsee Toshiba power management driver (BYOVD)Updater for Carbon Black’s Cloud Sensor AV (upd.exe)WinRM YDArk Zemana Anti-Rootkit driver fsutil

avoslocker (23 herramientas)

AnyDesk Atera Avast Anti-Rootkit driver Chisel Cobalt Strike FileZilla Gofile[.]io LaZagne Ligolo Mimikatz NirSoft WinLister Nmap PDQ Deploy PSCP PsExec RClone Sliver SoftPerfect NetScan Splashtop TacticalRMM WMIC XenArmor share[.]riseup[.]net

blackbasta Team (22 herramientas)

AdFind AnyDesk Atera BITSAdmin Backstab (Process Explorer driver)Bloodhound Brute Ratel C4 Cobalt Strike Metasploit Mimikatz NetSupport PSNmap PowerSploit PowerView PsExec Qaz[.]im Quick Assist RClone ScreenConnect SoftPerfect NetScan Splashtop Supremo

hive Team (22 herramientas)

Advanced IP Scanner Atera BCDEdit BITSAdmin Bloodhound Cobalt Strike GMER Impacket MEGA Metasploit Meterpreter PCHunter PowerShell Empire PrivatLab RClone ScreenConnect Sendspace SoftPerfect NetScan Splashtop UFile WMIC Windows Event Utility (wevtutil)

darkside (20 herramientas)

ADRecon AdFind Advanced IP Scanner AnyDesk Bashupload Cobalt Strike CrackMapExec GoToAssist Impacket MEGA Mimikatz Plink PowerSploit PsExec RClone Sendspace SessionGopher SoftPerfect NetScan TightVNC pCloud

yanluowang (18 herramientas)

AdFind Cent Browser Chisel Cobalt Strike GrabChrome GrabFF Impacket KeeThief LogMeIn Mimikatz NTDS Utility (ntdsutil)NirSoft WebBrowserPassView PsExec S3 Browser ScreenConnect SoftPerfect NetScan TeamViewer Windows Event Utility (wevtutil)

bianlian Team (17 herramientas)

Advanced IP Scanner Advanced Port Scanner AmmyyAdmin AnyDesk Atera Impacket MEGA PingCastle PsExec RClone RDP Recognizer ScreenConnect SharpShares SoftPerfect NetScan Splashtop TeamViewer WKTools

play Team (16 herramientas)

AdFind Cobalt Strike EDRKill (echo_driver.sys + DBUtil 2.3)FRP GMER HandleKatz IOBit Mimikatz Nanodump Plink PowerTool PsExec WKTools WinPEAS WinSCP icardagt.exe (version.dll DLL sideload)

fog Team (16 herramientas)

Advanced Port Scanner AnyDesk Certipy DonPAPI Impacket Metasploit NetExec Orpheus Powercat Proxychains PsExec SharpShares Sliver SoftPerfect NetScan Veeam-Get-Creds Zer0dump

incransom Team (15 herramientas)

7-Zip AdFind Advanced IP Scanner AnyDesk BackBlaze Bitvise SSH Client Finger MEGA Mimikatz PsExec RClone Restic SoftPerfect NetScan WinRAR s5cmd

maze (15 herramientas)

AdFind Advanced IP Scanner Bloodhound Cobalt Strike Metasploit Meterpreter Mimikatz PingCastle PowerSploit PowerView ProcDump PsExec ShareFinder WMIC WinSCP

vicesociety Team (15 herramientas)

Advanced IP Scanner Advanced Port Scanner Cobalt Strike Impacket MEGA Minidump NTDS Utility (ntdsutil)PowerAdmin PowerShell Empire PowerSploit Proxychains PsExec RClone WMIC WinSCP

pysa Team (14 herramientas)

ADRecon Advanced IP Scanner Advanced Port Scanner Chashell FileZilla Koadic Mimikatz PowerShell Empire PowerSploit ProcDump PsExec SessionGopher WMIC WinSCP

beast (13 herramientas)

Advanced IP Scanner Advanced Port Scanner AnyDesk Automim Everything.exe Klink LaZagne MEGA Mimikatz OpenSSH PsExec SoftPerfect NetScan WinSCP

avaddon Team (12 herramientas)

Anonfiles GMER MEGA Mimikatz PowerShell Empire PowerSploit PowerTool ProtonMail Sendspace SharpDump SoftPerfect NetScan TDSSKiller

quantum (12 herramientas)

AdFind AnyDesk Atera Cobalt Strike MEGA Mimikatz ProcDump PsExec RClone RSAT Splashtop WMIC

cicada3301 (12 herramientas)

ADRecon BCDEdit EDRSandBlast GOST Plink PowerSploit PowerView PsExec RClone Rubeus SoftPerfect NetScan WMIC

8base Team (11 herramientas)

GMER LaZagne Mimikatz NirSoft VNCPassView NirSoft WebBrowserPassView PCHunter PasswordFox ProcDump ProcessHacker PsExec RClone

medusalocker (11 herramientas)

Advanced IP Scanner Advanced Port Scanner HRSword Impacket Invoke-TheHash Mimikatz PCHunter ProcessHacker PsExec Remote Desktop Plus (RDP+)SoftPerfect NetScan

trigona (11 herramientas)

Advanced Port Scanner AnyDesk Cobalt Strike LogMeIn MEGA Mimikatz RClone ScreenConnect SoftPerfect NetScan Splashtop TeamViewer

interlock (11 herramientas)

AZCopy Advanced Port Scanner AnyDesk Azure Storage Explorer Cobalt Strike ProcessHacker PsExec PuTTY ScreenConnect ThreatFire System Monitor driver (BYOVD)WinSCP

ragnarlocker (11 herramientas)

Advanced Port Scanner AnyDesk Cobalt Strike Dsquery PsExec PsInfo Remote Manipulator System (RMS)RemoteUtilities SoftPerfect LanSearchPro VirtualBox WMIC

monti (10 herramientas)

Action1 AnyDesk Avast Anti-Rootkit driver GMER MEGA Mimikatz PSCP SoftPerfect NetScan Veeam-Get-Creds WinSCP

blackbyte Team (9 herramientas)

AnyDesk Cobalt Strike Dell Client driver (BYOVD)GIGABYTE Motherboard driver (BYOVD)MSI Afterburner driver (BYOVD)PowerShell Empire PowerView SoftPerfect NetScan Zemana Anti-Rootkit driver

yurei (9 herramientas)

AnyDesk Everything.exe Invoke-TheHash NetExec PsExec Rubeus SDelete SoftPerfect NetScan WinPEAS

everest Team (8 herramientas)

AnyDesk Atera Cobalt Strike Metasploit Meterpreter ProcDump SoftPerfect NetScan Splashtop

cactus Team (8 herramientas)

AnyDesk Chisel Cobalt Strike Nmap RClone SoftPerfect NetScan Splashtop SuperOps

dagonlocker (8 herramientas)

AdFind AnyDesk Cobalt Strike Nbtscan RClone Seatbelt ShareFinder SoftPerfect NetScan

rhysida Team (8 herramientas)

AnyDesk Impacket NTDS Utility (ntdsutil)PowerView PsExec WMIC WinSCP Windows Event Utility (wevtutil)

cuba (7 herramientas)

Avast Anti-Rootkit driver Cobalt Strike Meterpreter Mimikatz NetSupport PsExec Termite

karakurt (7 herramientas)

AnyDesk Cobalt Strike FileZilla MEGA Mimikatz Ngrok RClone

crazyhunter (7 herramientas)

Donut Prince Ransomware SharpGPOAbuse Zemana Anti-Rootkit driver av-1m.exe (AV bypass)bb.exe (shellcode loader)go.exe / go2.exe (BYOVD loader)

spacebears (7 herramientas)

BCDEdit Defender Control VmConnect WMIC fsutil netsh vssadmin

diavol (7 herramientas)

AdFind Advanced IP Scanner AnyDesk Cobalt Strike FileZilla Rubeus ShareFinder

revil (7 herramientas)

AdFind BITSAdmin Bloodhound Cobalt Strike PrivatLab RClone Sendspace

onepercent (6 herramientas)

BetterSafetyKatz Cobalt Strike Mimikatz RClone SharpKatz SharpSploit

ransomexx (6 herramientas)

BCDEdit Cobalt Strike LaZagne Mimikatz ProcDump Windows Event Utility (wevtutil)

nokoyawa (6 herramientas)

AdFind AnyDesk Cobalt Strike FileZilla PsExec SoftPerfect NetScan

safepay Team (6 herramientas)

7-Zip CMSTPLUA Invoke-ShareFinder Regsvr32.exe WinRAR dllhost.exe

helldown (5 herramientas)

Advanced Port Scanner HRSword Mimikatz PsExec TeamViewer

netwalker (5 herramientas)

AdFind Cobalt Strike Mimikatz ProcDump PsExec

raworld (5 herramientas)

Bluetooth Stack for Windows by Toshiba (toshdpdb.exe)Impacket NPS ProcDump PsExec

xinglocker (5 herramientas)

AdFind Bloodhound Cobalt Strike PowerView ShareFinder

dragonforce Team (4 herramientas)

Advanced IP Scanner Mimikatz PingCastle SoftPerfect NetScan

lapsus$ (4 herramientas)

ADExplorer AnyDesk Mimikatz NTDS Utility (ntdsutil)

hunters Team (4 herramientas)

Advanced IP Scanner Advanced Port Scanner RClone WinSCP

snatch Team (4 herramientas)

BCDEdit Cobalt Strike Meterpreter ServiceControl (sc.exe)

Loki (3 herramientas)

Advanced IP Scanner NirSoft ChromePass NirSoft WebBrowserPassView

embargo (3 herramientas)

BCDEdit ServiceControl (sc.exe)s4killer (Minifilter Driver)

nightspire Team (3 herramientas)

Everything.exe MEGA WinSCP

mallox (3 herramientas)

Dropmefiles File[.]io Sendspace

clop Team (3 herramientas)

Cobalt Strike PowerShell Empire TinyMet

IMNCrew (2 herramientas)

LaZagne Restic

lynx Team (2 herramientas)

Restic SoftPerfect NetScan

mountlocker (2 herramientas)

MEGA PrivatLab

sarcoma Team (1 herramientas)

Advanced IP Scanner

daixin (1 herramientas)

RClone

blackmatter (1 herramientas)

PrivatLab

babuk (1 herramientas)

File[.]io

ranzy (1 herramientas)

UFile