GroupProfiles: ProphetSpider.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
Prophet Spider's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| TXPortMap | Mimikatz | BurpSuite | PAExec | PSCP | |||
| ConPtyShell | Minidump | ||||||
| Godzilla Web Shell | WinExe | ||||||
| PwnTools | |||||||
| Responder |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that were used the Prophet Spider IAB group that leads to ransomware deployment, such as MAZE, Egregor, or MountLocker
#### Sources
| Date Published | Report |
|---|---|
| 20 September 2023 | https://www.secureworks.com/research/gold-melody-profile-of-an-initial-access-broker |
| 23 March 2023 | https://cloud.google.com/blog/topics/threat-intelligence/unc961-multiverse-financially-motivated |
| 7 March 2022 | https://www.crowdstrike.com/blog/prophet-spider-exploits-citrix-sharefile |
| 4 August 2021 | https://www.crowdstrike.com/blog/prophet-spider-exploits-oracle-weblogic-to-facilitate-ransomware-activity |