Kill Chain & Diamond Model Analysis
Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.
Aggressive Inventory Zombies
(threat actor)
0 techniques
40 tools/malware
2 vulnerabilities
39 IOCs
1/7 stages covered
Deepest: Exploitation
Stage risk:
Critical
High
Medium
None
Indicators of Compromise (39)
ATT&CK Tactic Coverage
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command & Control
Exfiltration
Impact
Diamond Model of Intrusion
Adversary · Capability · Infrastructure · Victim
Aggressive Inventory Zombies
Type: Unknown Active
AIZ
cpyy
APT3
Gothic Panda
UPS Team
+14 more
40 tool(s)/malware 2 CVE(s)
Targeted Sectors
government
defense
financial-services
non-profit
retail
telecommunications
aerospace
energy
media
education
information-technology
healthcare
pharmaceutical
manufacturing
maritime
think-tank
chemical
entertainment
gaming
hospitality
mining
nuclear
legal-services
transportation
construction
food-agriculture
Targeted Countries
US
CN
GB
IN
JP
KR
DE
RU
IR
FR
CA
SA
TW
IL
TR
AU
PK
KZ
UA
ES
PL
SG
VN
NL
BR
IT
BY
AE
IQ
MX
RO
SY
AZ
EG
LB
Diamond Model Meta-Features
Direction
Adversary → Infrastructure → Victim
Adversary → Capability
Adversary → Infrastructure
Capability → Victim
Infrastructure → Victim
Diamond Model edges