Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

Saved analyses

Dragonbridge (threat actor)

Risk

Medium

0 techniques 40 tools/malware 7 vulnerabilities 39 IOCs 1/7 stages covered Deepest: Exploitation

1 Reconnaissance

No data

›

2 Weaponization

No data

›

3 Delivery

No data

›

4 Exploitation

CVE CVE-2022-23521

CVE CVE-2022-27518

CVE CVE-2022-27596

CVE CVE-2022-31704

CVE CVE-2022-31706

CVE CVE-2022-41903

CVE CVE-2022-41953

›

5 Installation

No data

›

6 Command & Control

No data

›

7 Actions on Objectives

No data

Stage risk: Critical High Medium None

Tools & Malware (40)

BRAIN Brain Cipher Camaro Dragon Cobalt Cobalt Strike Code-signing certificates Cuba Dark Embargo GitHub Global Globe Godfather Hafnium Hive Kubernetes Leverage LockBit Malware Microsoft Teams Nefilim Nefilim Ransomware Nexus Nord Stream PHOTO PLUTONIUM Pink Play Royal STOP SUNBURST Sliver SolarWinds StrongPity Telegram Trojan Unknown Volt Typhoon WhatsApp phishing

Indicators of Compromise (39)

Domain

compromised.Aviation Chess.com NJ.gov disinformation.Warning safeguards.Legislation access.GDPR months.GDPR purpose.GDPR +30 more

MD5 Hash

07eb4b3e30b215120251ca9096f5aa4c

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness

4/4

Adversary

Confidence

60%

Dragonbridge

Type: Unknown Active

Spamouflage Dragon HAFNIUM ALPHV

Infrastructure 38 IOC(s)

50%

Domain

compromised.Aviation Chess.com NJ.gov disinformation.Warning safeguards.Legislation +33

Artifacts (1)

07eb4b3e30b215120251ca9096f5aa4c

Capability

50%

40 tool(s)/malware 7 CVE(s)

BRAIN Brain Cipher Camaro Dragon Cobalt Cobalt Strike Code-signing certificates Cuba Dark +32

Victim

70%

Targeted Sectors

government defense media financial-services mining healthcare critical-infrastructure telecommunications education manufacturing maritime information-technology aerospace energy non-profit construction transportation aviation utilities retail

Targeted Countries

CN US RU UA PL KP GB CA DE FR ES TW AU NL VN KZ JP IL BR IT IR

Diamond Model Meta-Features

Phase

Exploitation

Result

Active

Direction

Adversary → Infrastructure → Victim

Methodology

Unknown

Adversary → Capability

Adversary → Infrastructure

Capability → Victim

Infrastructure → Victim

Diamond Model edges