GroupProfiles: BlackSuit.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
BlackSuit's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| AdFind | AnyDesk | Eraser | AccountRestore | Cobalt Strike | Chisel | PsExec | RClone |
| Advanced IP Scanner | Atera | GMER | Mimikatz | Brute Ratel C4 | Cloudflared | ||
| SharpShares | LogMeIn | NirSoft Dialupass | OpenSSH | ||||
| SoftPerfect NetScan | MobaXterm | NirSoft IEPassView (iepv) | |||||
| NirSoft MailPassView | |||||||
| NirSoft Netpass | |||||||
| NirSoft RouterPassView |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to BlackSuit (previously Royal) ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 10 February 2025 | https://connect.cybercx.com.au/dfir-threat-report-au-2025 |
| 7 August 2024 | https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-061a |