MITRE ATT&CKgroup

G0075 Rancor

Published 2018-10-17 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.3
Created
2018-10-17

Description

Rancor is a threat group that has led targeted campaigns against the South East Asia region. Rancor uses politically-motivated lures to entice victims to open malicious documents.

Related

Uses · MITRE ATT&CK (13)

  • T1071.001 Web Protocols sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1218.007 Msiexec sub-technique
  • T1546.003 Windows Management Instrumentation Event Subscription sub-technique
  • T1053.005 Scheduled Task sub-technique
  • S0254 PLAINTEE software (malware)
  • S0255 DDKONG software (malware)
  • S0160 certutil software (tool)
  • S0075 Reg software (tool)
  • T1105 Ingress Tool Transfer technique

References