GroupProfiles: TheGentlemen.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
TheGentlemen's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| Advanced IP Scanner | AnyDesk | EDRStartupHinder | DumpBrowserSecrets | Impacket | Amnezia VPN | PsExec | WinSCP |
| API-C99-NL | FreeRDP | KslDump | KslKatz | NetExec | Chisel | ||
| Censys | MeshAgent | PowerRun | Mimikatz | PowerZure | Cloudflared | ||
| CertiHound | RedSun | RegPwn | OpenSSH | ||||
| Gogo | ThrottleStop driver (BYOVD) | Responder | OpenVPN | ||||
| MANSPIDER | Titanis | Proxychains | |||||
| Nmap | Velociraptor | PuTTY | |||||
| PrivHound | ZeroPulse | Wireguard VPN | |||||
| RelayKing-Depth | |||||||
| Shodan | |||||||
| SoftPerfect NetScan | |||||||
| TaskHound |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to TheGentlemen's ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 15 May 2026 | https://ransom-isac.com/blog/the-gentlemen-leak-analysis/ |
| 14 May 2026 | https://www.kelacyber.com/blog/the-gentlemen-ransomware-internal-chat-leak-analysis-2026/ |
| 13 May 2026 | https://research.checkpoint.com/2026/thus-spoke-the-gentlemen/ |
| 9 September 2025 | https://www.trendmicro.com/en_us/research/25/i/unmasking-the-gentlemen-ransomware.html |