Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

Saved analyses

Starry Addax (threat actor)

Risk

Medium

0 techniques 40 tools/malware 11 vulnerabilities 4 IOCs 1/7 stages covered Deepest: Exploitation

1 Reconnaissance

No data

›

2 Weaponization

No data

›

3 Delivery

No data

›

4 Exploitation

CVE CVE-2015-1701

CVE CVE-2017-11882

CVE CVE-2021-1675

CVE CVE-2021-34527

CVE CVE-2023-23397

CVE CVE-2023-48788

CVE CVE-2024-0172

CVE CVE-2024-26234

CVE CVE-2024-4577

CVE CVE-2025-20333

CVE CVE-2025-20362

›

5 Installation

No data

›

6 Command & Control

No data

›

7 Actions on Objectives

No data

Stage risk: Critical High Medium None

Tools & Malware (40)

BlackByte Buhtrap Chollima Cobalt Cobalt Strike DEADEYE Dark DarkHotel Emotet Ghost RAT Global Jackal LNK files Leverage Lynx Malware Matrix Naikon Nexus Nitro Phishing campaigns PlugX Poseidon PowerShell Predator RUBYCARP Samurai Shamoon Sponsor TeamSpy TinyTurla Trojan Tsunami Turla Unknown VICEROY Void gcman phishing phishing emails

Indicators of Compromise (4)

Domain

360.net amnesty.org Kiber.io

Filename

msimg32.dll

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness

4/4

Adversary

Confidence

60%

Starry Addax

Type: Unknown Active

fast16 Asylum Ambuscade Thallium Black Banshee Mythic Leopard +19 more

Infrastructure 3 IOC(s)

50%

Domain

360.net amnesty.org Kiber.io

Artifacts (1)

msimg32.dll

Capability

50%

40 tool(s)/malware 11 CVE(s)

BlackByte Buhtrap Chollima Cobalt Cobalt Strike DEADEYE Dark DarkHotel +32

Victim

70%

Targeted Sectors

government non-profit financial-services defense telecommunications education energy aerospace media healthcare manufacturing mining information-technology maritime think-tank critical-infrastructure aviation pharmaceutical food-agriculture chemical legal-services utilities oil-gas hospitality nuclear entertainment

Targeted Countries

US CN IN GB JP DE UA KR PL RU TW IR KZ TR IL SA VN FR CA BR MX AU PK NL AZ AE SG ES IQ BY KP IT SY RO EG

Diamond Model Meta-Features

Phase

Exploitation

Result

Active

Direction

Adversary → Infrastructure → Victim

Methodology

Unknown

Adversary → Capability

Adversary → Infrastructure

Capability → Victim

Infrastructure → Victim

Diamond Model edges