Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

Saved analyses

IntelBroker (threat actor)

Risk

Medium

0 techniques 40 tools/malware 0 vulnerabilities 11 IOCs 0/7 stages covered

1 Reconnaissance

No data

›

2 Weaponization

No data

›

3 Delivery

No data

›

4 Exploitation

No data

›

5 Installation

No data

›

6 Command & Control

No data

›

7 Actions on Objectives

No data

Stage risk: Critical High Medium None

Tools & Malware (40)

APT38 Akira AppDomainManager AppleJeus BITS BITS Jobs BlackByte Carbanak ClickOnce Cobalt Confucius Custom malware Dark Global Group Policy Guard Hafnium Hook Indrik Spider Interception JamPlus Kimsuky MSBuild Machete Malware Medusa MuddyWater Naikon Nexus Open-source tools PowerShell Process Hollowing Ransomware variants Remote access tools Void Volt Typhoon Winnti netsh phishing systemd

Indicators of Compromise (11)

Domain

TEMP.MixMaster TEMP.Zagros TEMP.Jumper TEMP.Periscope TEMP.Hex FalconFeeds.io TEMP.hermit TEMP.Reaper +2 more

Email Address

rocke@live.cn

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness

4/4

Adversary

Confidence

60%

IntelBroker

Type: Unknown Active

Sandworm Team Operation Cleaver Shell Crew WebMasters KungFu Kittens +5 more

Infrastructure 10 IOC(s)

50%

Domain

TEMP.MixMaster TEMP.Zagros TEMP.Jumper TEMP.Periscope TEMP.Hex +5

Artifacts (1)

rocke@live.cn

Capability

50%

40 tool(s)/malware

APT38 Akira AppDomainManager AppleJeus BITS BITS Jobs BlackByte Carbanak +32

Victim

70%

Targeted Sectors

government financial-services defense telecommunications healthcare education manufacturing non-profit energy media critical-infrastructure pharmaceutical aviation hospitality retail aerospace information-technology think-tank transportation mining chemical gaming legal-services nuclear entertainment oil-gas maritime construction utilities

Targeted Countries

US CN RU IR GB VN JP IL AU SA PK TW AE UA SG KR IN DE BY TR MX ES PL CA BR RO FR NG KP IT LB AZ KZ

Diamond Model Meta-Features

Result

Active

Direction

Adversary → Infrastructure → Victim

Methodology

Unknown

Adversary → Capability

Adversary → Infrastructure

Capability → Victim

Infrastructure → Victim

Diamond Model edges