Actor Profile

🏹 ATT&CK — Ransomware

🔄 Pivot:🏹 ATT&CK

Classification

Ransomware

Leak-site victims

Ransomware.live

Associated IoCs

200

local intel

MITRE techniques

—

ATT&CK

Tracked

Local

PIVOT🔍 Advanced Search 🕵 OSINT Pivot 🔗 Link Analysis 🕑 Timeline 📤 Export STIX/MISP

🔥 Leak-Site Victims (1)

Victim	Country	Published	Domain
—			—

Source: Ransomware.live leak-site monitoring (cached, offline-safe).

Associated Indicators (200)

Indicator	Type
`https://attack.mitre.org/techniques/T158`	url	profile
`https://attack.mitre.org/techniques/T103`	url	profile
`https://attack.mitre.org/techniques/T100`	url	profile
`https://www.geeksforgeeks.org/inter-proc`	url	profile
`https://attack.mitre.org/techniques/T155`	url	profile
`https://attack.mitre.org/techniques/T156`	url	profile
`https://attack.mitre.org/techniques/T106`	url	profile
`https://attack.mitre.org/techniques/T156`	url	profile
`https://attack.mitre.org/techniques/T156`	url	profile
`https://cloud.google.com/blog/topics/thr`	url	profile
`https://techcommunity.microsoft.com/t5/c`	url	profile
`https://cdn.logic-control.com/docs/scada`	url	profile
`https://www.crowdstrike.com/blog/targete`	url	profile
`https://thehackernews.com/2022/05/avoslo`	url	profile
`https://www.crowdstrike.com/blog/how-dop`	url	profile
`https://www.mandiant.com/resources/chasi`	url	profile
`https://blogs.blackberry.com/en/2022/02/`	url	profile
`https://www.fortinet.com/blog/psirt-blog`	url	profile
`https://attack.mitre.org/techniques/T156`	url	profile
`https://attack.mitre.org/techniques/T115`	url	profile
`https://unit42.paloaltonetworks.com/nort`	url	profile
`https://cloud.google.com/blog/topics/thr`	url	profile
`https://attack.mitre.org/techniques/T121`	url	profile
`https://sensepost.com/blog/2017/outlook-`	url	profile
`https://attack.mitre.org/techniques/T113`	url	profile
`https://linux.die.net/man/1/bash`	url	profile
`https://support.apple.com/HT208050`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://attack.mitre.org/techniques/T120`	url	profile
`https://www.reliaquest.com/blog/health-c`	url	profile
`https://attack.mitre.org/techniques/T111`	url	profile
`https://attack.mitre.org/techniques/T159`	url	profile
`https://attack.mitre.org/techniques/T158`	url	profile
`https://en.wikipedia.org/wiki/Onion_rout`	url	profile
`https://attack.mitre.org/techniques/T109`	url	profile
`https://technet.microsoft.com/bb490717.a`	url	profile
`https://attack.mitre.org/techniques/T107`	url	profile
`https://attack.mitre.org/techniques/T149`	url	profile
`https://www.trendmicro.com/en_us/researc`	url	profile
`https://www.trendmicro.com/en_us/researc`	url	profile
`https://attack.mitre.org/techniques/T149`	url	profile
`https://oddvar.moe/2017/08/13/bypassing-`	url	profile
`https://msdn.microsoft.com/windows/deskt`	url	profile
`https://msdn.microsoft.com/windows/deskt`	url	profile
`https://docs.microsoft.com/previous-vers`	url	profile
`https://web.archive.org/web/202504191405`	url	profile
`CVE-2017-8625`	cve	profile
`https://attack.mitre.org/techniques/T121`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`https://en.wikipedia.org/wiki/Run_comman`	url	profile
`https://attack.mitre.org/techniques/T106`	url	profile
`https://attack.mitre.org/techniques/T168`	url	profile
`https://attack.mitre.org/techniques/T156`	url	profile
`https://unit42.paloaltonetworks.com/exam`	url	profile
`https://www.proofpoint.com/us/threat-ref`	url	profile
`https://blog.sygnia.co/luna-moth-false-s`	url	profile
`https://unit42.paloaltonetworks.com/luna`	url	profile
`https://blog.cyberproof.com/blog/double-`	url	profile
`https://www.cisa.gov/uscert/ncas/alerts/`	url	profile
`https://krebsonsecurity.com/2024/03/thre`	url	profile
`https://attack.mitre.org/techniques/T156`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`example.service`	domain	profile
`example.timer`	domain	profile
`https://attack.mitre.org/techniques/T102`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://www.hybrid-analysis.com/sample/2`	url	profile
`28553b3a9d2ad4361d33d29ac4bf771d008e0073`	hash_sha256	profile
`https://wiki.archlinux.org/index.php/Sys`	url	profile
`https://www.tecmint.com/control-systemd-`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://attack.mitre.org/techniques/T159`	url	profile
`https://blog.malwarebytes.com/threat-int`	url	profile
`https://modexp.wordpress.com/2019/05/25/`	url	profile
`https://docs.microsoft.com/en-us/windows`	url	profile
`https://www.microsoft.com/security/blog/`	url	profile
`https://attack.mitre.org/techniques/T157`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://www.forescout.com/resources/anal`	url	profile
`https://www.recordedfuture.com/blog/iden`	url	profile
`https://www.randhome.io/blog/2020/12/20/`	url	profile
`https://www.sentinelone.com/labs/top-tie`	url	profile
`https://attack.mitre.org/techniques/T158`	url	profile
`https://attack.mitre.org/techniques/T119`	url	profile
`https://attack.mitre.org/techniques/T168`	url	profile
`http://defcon.org/images/defcon-22/dc-22`	url	profile
`http://blog.gentilkiwi.com/securite/mimi`	url	profile
`https://capec.mitre.org/data/definitions`	url	profile
`https://attack.mitre.org/techniques/T109`	url	profile
`https://attack.mitre.org/techniques/T101`	url	profile
`https://attack.mitre.org/techniques/T121`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`https://embracethered.com/blog/posts/202`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://www.netskope.com/blog/nitol-botn`	url	profile
`https://news.sophos.com/en-us/2021/07/04`	url	profile
`https://www.joesecurity.org/blog/4988399`	url	profile
`https://www.joesecurity.org/blog/3660886`	url	profile
`https://attack.mitre.org/techniques/T167`	url	profile
`https://objective-see.org/blog/blog_0x21`	url	profile
`https://richard-purves.com/2017/11/09/md`	url	profile
`https://tldp.org/LDP/lkmpg/2.4/html/x437`	url	profile
`https://pikeralpha.wordpress.com/2017/08`	url	profile
`https://tldp.org/HOWTO/Module-HOWTO/x197`	url	profile
`https://www.megasecurity.org/papers/Root`	url	profile
`https://support.apple.com/guide/deployme`	url	profile
`https://developer.apple.com/support/kern`	url	profile
`https://developer.apple.com/business/doc`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`https://attack.mitre.org/software/S0039)`	url	profile
`https://attack.mitre.org/techniques/T104`	url	profile
`https://attack.mitre.org/techniques/T117`	url	profile
`https://github.com/gentilkiwi/mimikatz/i`	url	profile
`https://blog.stealthbits.com/manipulatin`	url	profile
`https://docs.microsoft.com/en-us/windows`	url	profile
`https://www.ultimatewindowssecurity.com/`	url	profile
`https://attack.mitre.org/techniques/T109`	url	profile
`https://attack.mitre.org/techniques/T119`	url	profile
`https://nvd.nist.gov/vuln/detail/CVE-202`	url	profile
`https://posts.inthecyber.com/exposed-for`	url	profile
`https://attack.mitre.org/techniques/T156`	url	profile
`https://cyware.com/news/how-hackers-expl`	url	profile
`https://attack.mitre.org/techniques/T159`	url	profile
`https://assets.documentcloud.org/documen`	url	profile
`https://attack.mitre.org/techniques/T114`	url	profile
`https://attack.mitre.org/techniques/T106`	url	profile
`https://attack.mitre.org/techniques/T109`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`https://learn.microsoft.com/en-us/entra/`	url	profile
`https://docs.microsoft.com/en-us/azure/a`	url	profile
`https://cloud.google.com/iam/docs/servic`	url	profile
`https://support.google.com/cloudidentity`	url	profile
`https://docs.aws.amazon.com/IAM/latest/U`	url	profile
`https://docs.aws.amazon.com/lambda/lates`	url	profile
`https://docs.aws.amazon.com/IAM/latest/U`	url	profile
`https://attack.mitre.org/techniques/T113`	url	profile
`https://support.microsoft.com/en-us/topi`	url	profile
`https://us-cert.cisa.gov/APTs-Targeting-`	url	profile
`https://attack.mitre.org/techniques/T119`	url	profile
`https://docs.microsoft.com/en-us/windows`	url	profile
`https://blog.malwarebytes.com/cybercrime`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`https://attack.mitre.org/techniques/T157`	url	profile
`https://attack.mitre.org/techniques/T116`	url	profile
`https://attack.mitre.org/techniques/T168`	url	profile
`https://www.trendmicro.com/en_us/researc`	url	profile
`https://www.microsoft.com/en-us/security`	url	profile
`https://attack.mitre.org/techniques/T153`	url	profile
`https://en.wikipedia.org/wiki/Keychain_(`	url	profile
`https://attack.mitre.org/techniques/T114`	url	profile
`https://attack.mitre.org/techniques/T106`	url	profile
`https://attack.mitre.org/techniques/T119`	url	profile
`https://attack.mitre.org/techniques/T108`	url	profile
`https://www.securityinbits.com/malware-a`	url	profile
`https://docs.microsoft.com/windows/deskt`	url	profile
`https://www.countercept.com/blog/detecti`	url	profile
`https://attack.mitre.org/techniques/T150`	url	profile
`https://attack.mitre.org/techniques/T104`	url	profile
`https://nvd.nist.gov/vuln/detail/CVE-201`	url	profile
`CVE-2017-0176`	cve	profile
`https://github.com/vmware/vcf-security-a`	url	profile
`https://attack.mitre.org/techniques/T121`	url	profile
`https://attack.mitre.org/techniques/T159`	url	profile
`https://attack.mitre.org/techniques/T110`	url	profile
`com.apple.emond.plist`	domain	profile
`https://www.xorrior.com/emond-persistenc`	url	profile
`http://www.magnusviri.com/Mac/what-is-em`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`https://technet.microsoft.com/en-us/libr`	url	profile
`https://x.com/MsftSecIntel/status/167157`	url	profile
`https://www.microsoft.com/en-us/security`	url	profile
`https://www.comparitech.com/blog/informa`	url	profile
`https://www.bugcrowd.com/glossary/replay`	url	profile
`https://attack.mitre.org/techniques/T121`	url	profile
`https://attack.mitre.org/techniques/T107`	url	profile
`http://blog.crowdstrike.com/registry-ana`	url	profile
`https://www.fireeye.com/blog/threat-rese`	url	profile
`https://capec.mitre.org/data/definitions`	url	profile
`https://attack.mitre.org/techniques/T101`	url	profile
`https://www.elastic.co/blog/how-hunt-det`	url	profile
`https://blog.gdatasoftware.com/2014/10/2`	url	profile
`https://msdn.microsoft.com/library/ms694`	url	profile
`https://attack.mitre.org/techniques/T112`	url	profile
`https://attack.mitre.org/techniques/T167`	url	profile
`https://attack.mitre.org/techniques/T107`	url	profile
`https://attack.mitre.org/techniques/T102`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://web.archive.org/web/200510130842`	url	profile
`https://web.archive.org/web/201507110516`	url	profile
`https://lwn.net/Articles/604515/`	url	profile
`https://web.archive.org/web/202102052111`	url	profile
`https://attack.mitre.org/techniques/T105`	url	profile
`https://learn.microsoft.com/en-us/previo`	url	profile
`https://attack.mitre.org/techniques/T154`	url	profile
`https://capec.mitre.org/data/definitions`	url	profile
`https://attack.mitre.org/techniques/T102`	url	profile

MITRE ATT&CK Groups ↗ Ransomware.live ↗ APT Theater →

🏹 Campaigns & malware

Campaigns →Malware families →Nation-State theater →Sanctions →Wanted & Rewards →

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🧭 Intelligence disciplines

CYBINT →OSINT →HUMINT →GEOINT →

Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook