GroupProfiles: BlackBasta.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
Black Basta's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| AdFind | AnyDesk | Backstab | Mimikatz | Brute Ratel (BRc4) | BITSAdmin | Rclone | |
| Bloodhound | Atera | Cobalt Strike | PsExec | Qaz[.]im | |||
| PowerView | NetSupport | Metasploit | |||||
| PSNmap | ScreenConnect | PowerSploit | |||||
| SoftPerfect NetScan | Splashtop | ||||||
| Supremo |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to Black Basta ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 29 July 2024 | https://cloud.google.com/blog/topics/threat-intelligence/unc4393-goes-gently-into-silentnight |
| 10 May 2024 | https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-131a |
| 12 October 2022 | https://www.trendmicro.com/en_ca/research/22/j/black-basta-infiltrates-networks-via-qakbot-brute-ratel-and-coba.html |