Kill Chain & Diamond Model Analysis
Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.
Chronus Group
(threat actor)
3 techniques
54 tools/malware
1 vulnerabilities
18 IOCs
3/7 stages covered
Deepest: Actions on Objectives
›
›
›
›
›
›
7
Actions on Objectives
1
Stage risk:
Critical
High
Medium
None
Indicators of Compromise (18)
ATT&CK Tactic Coverage
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command & Control
Exfiltration
Impact
Recommended Mitigations
13 MITRE ATT&CK mitigations cover detected techniques
Browse all →
Actions on Objectives
(2)
Detection Coverage
3 strategies
3/7 stages covered
Actions on Objectives
(1)
Diamond Model of Intrusion
Adversary · Capability · Infrastructure · Victim
Chronus Group
Type: Unknown Active
tracked as
cpyy
APT3
Gothic Panda
UPS Team
+15 more
3 technique(s) 54 tool(s)/malware 1 CVE(s)
Targeted Sectors
government
defense
financial-services
non-profit
telecommunications
energy
media
aerospace
healthcare
education
information-technology
maritime
manufacturing
think-tank
pharmaceutical
chemical
mining
hospitality
legal-services
nuclear
entertainment
Targeted Countries
US
CN
GB
IN
JP
DE
KR
IR
MX
RU
SA
TW
FR
CA
IL
TR
AU
KZ
PK
VN
UA
PL
AE
SG
NL
BR
ES
IQ
BY
IT
SY
RO
EG
AZ
Diamond Model Meta-Features
Phase
Actions on Objectives
Direction
Adversary → Infrastructure → Victim
Adversary → Capability
Adversary → Infrastructure
Capability → Victim
Infrastructure → Victim
Diamond Model edges
Activity Threads
Kill chain phase → Diamond Model event mapping