GroupProfiles: BianLian.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
BianLian's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| Advanced IP Scanner | AmmyyAdmin | RDP Recognizer | Impacket | PsExec | MEGA | ||
| PingCastle | AnyDesk | RClone | |||||
| SharpShares | Atera | ||||||
| SoftPerfect NetScan | ScreenConnect | ||||||
| WKTools | Splashtop | ||||||
| TeamViewer |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to BianLian ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 26 March 2025 | https://www.welivesecurity.com/en/eset-research/shifting-sands-ransomhub-edrkillshifter/ |
| 16 May 2023 | https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-136a |