G1016 FIN13

Uses · MITRE ATT&CK (57)

• T1098.007 Additional Local or Domain Groups sub-technique
• T1657 Financial Theft technique
• T1016.001 Internet Connection Discovery sub-technique
• T1589 Gather Victim Identity Information technique
• T1590.004 Network Topology sub-technique
• T1587.001 Malware sub-technique
• T1588.002 Tool sub-technique
• T1071.001 Web Protocols sub-technique
• T1572 Protocol Tunneling technique
• T1090.001 Internal Proxy sub-technique
• T1074.001 Local Data Staging sub-technique
• T1078.001 Default Accounts sub-technique
• T1574.001 DLL sub-technique
• T1059.001 PowerShell sub-technique
• T1059.003 Windows Command Shell sub-technique
• T1059.005 Visual Basic sub-technique
• T1565 Data Manipulation technique
• T1564.001 Hidden Files and Directories sub-technique
• T1087.002 Domain Account sub-technique
• T1560.001 Archive via Utility sub-technique
• T1134.003 Make and Impersonate Token sub-technique
• T1003.001 LSASS Memory sub-technique
• T1003.002 Security Account Manager sub-technique
• T1003.003 NTDS sub-technique
• T1021.001 Remote Desktop Protocol sub-technique
• T1021.002 SMB/Windows Admin Shares sub-technique
• T1021.004 SSH sub-technique
• T1021.006 Windows Remote Management sub-technique
• T1056.001 Keylogging sub-technique
• T1556 Modify Authentication Process technique