Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

Saved analyses

Cyber Army of Russia Reborn (threat actor)

Risk

Medium

0 techniques 40 tools/malware 0 vulnerabilities 40 IOCs 0/7 stages covered

1 Reconnaissance

No data

›

2 Weaponization

No data

›

3 Delivery

No data

›

4 Exploitation

No data

›

5 Installation

No data

›

6 Command & Control

No data

›

7 Actions on Objectives

No data

Stage risk: Critical High Medium None

Tools & Malware (40)

Alphv BRAIN Black Basta BlackCat BlackCat ransomware Botnets CL0P Chaos Cl0p ransomware Crisis Custom tools Cyber Av3ngers Dark Decryptor Tools Exploit kits Global Handala Hive Hook Kubernetes Leverage LockBit LockBit ransomware Malware Nexus PHOTO Phishing emails Phishing-as-a-Service kits Play Ransomware tools Royal Silence Social engineering tactics SolarWinds Telegram Telegram channels Volt Typhoon Wiper malware inter phishing

Indicators of Compromise (40)

Domain

Mallory.ai NJ.gov Canada.ca infrastructure.Footnote operations.Footnote Canada.Footnote organizations.Footnote activity.Footnote +32 more

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness

4/4

Adversary

Confidence

60%

Cyber Army of Russia Reborn

Type: Unknown Active

Volt Typhoon BlackCat Vika Tory SovaSonya +3 more

Infrastructure 40 IOC(s)

50%

Domain

Mallory.ai NJ.gov Canada.ca infrastructure.Footnote operations.Footnote +35

Capability

50%

40 tool(s)/malware

Alphv BRAIN Black Basta BlackCat BlackCat ransomware Botnets CL0P Chaos +32

Victim

70%

Targeted Sectors

government critical-infrastructure defense financial-services healthcare media energy telecommunications manufacturing aerospace information-technology utilities non-profit aviation pharmaceutical retail oil-gas nuclear transportation

Targeted Countries

RU CA CN US IR UA IL IN KP GB KR

Diamond Model Meta-Features

Result

Active

Direction

Adversary → Infrastructure → Victim

Methodology

Unknown

Adversary → Capability

Adversary → Infrastructure

Capability → Victim

Infrastructure → Victim

Diamond Model edges