Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started

Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

Akira (threat actor)
Risk
50
High
17 techniques 3 tools/malware 0 vulnerabilities 200 IOCs 4/7 stages covered Deepest: Actions on Objectives
1 Reconnaissance
No data
2 Weaponization
No data
3 Delivery
No data
4 Exploitation
1
T1059.001
PowerShell execution
5 Installation
4
6 Command & Control
4
T1213.002
Sharepoint collection
T1560.001
T1219
Remote Access Tools command and control
T1021.001
Remote Desktop Protocol lateral movement
7 Actions on Objectives
8
Stage risk: Critical High Medium None

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness
2/4
Adversary
Confidence
90%

Akira

Type: Unknown First seen: 2023 Active
GOLD SAHARA PUNK SPIDER Howling Scorpius Akira
Capability
90%
17 technique(s) 3 tool(s)/malware
collection
command and control
credential access
defense impairment
Victim

No victim targeting data available.

Diamond Model Meta-Features

Phase

Actions on Objectives

Result

Active

Direction

Adversary → Capability → Victim

Methodology

Unknown

First Seen

2023-04-12

Adversary → Capability
Adversary → Infrastructure
Capability → Victim
Infrastructure → Victim
Diamond Model edges

Activity Threads Kill chain phase → Diamond Model event mapping

4 Exploitation

Capability (Techniques)

Capability (Malware)

Infrastructure

No infra linked
5 Installation

Capability (Techniques)

Capability (Malware)

Infrastructure

No infra linked
6 Command & Control

Capability (Malware)

Infrastructure

No infra linked
7 Actions on Objectives

Capability (Malware)

Infrastructure

No infra linked
Leaving Threaticon

This link opens an external site that isn't part of the platform.