8174aa05074bfd9a32c13554eb0781c10fc7032a72e383b20608668e47a890f8 | Triage™

Login
Reports

Overview

overview

Static

static

mdline/ven...on.ps1

windows10-2004-x64

3

mdline/ven...on.ps1

windows11-ltsc_2024-x64

3

mdline/ven...ure.js

windows10-2004-x64

3

mdline/ven...ure.js

windows11-ltsc_2024-x64

3

mdline/ven...ons.js

windows10-2004-x64

3

mdline/ven...ons.js

windows11-ltsc_2024-x64

3

mdline/ven...ate.js

windows10-2004-x64

3

mdline/ven...ate.js

windows11-ltsc_2024-x64

3

mdline/ven...on.ps1

windows10-2004-x64

3

mdline/ven...on.ps1

windows11-ltsc_2024-x64

3

mdline/ven...ons.js

windows10-2004-x64

3

mdline/ven...ons.js

windows11-ltsc_2024-x64

3

mdline/ven...ter.js

windows10-2004-x64

3

mdline/ven...ter.js

windows11-ltsc_2024-x64

3

mdline/ven...ser.js

windows10-2004-x64

3

mdline/ven...ser.js

windows11-ltsc_2024-x64

3

mdline/ven...eam.js

windows10-2004-x64

3

mdline/ven...eam.js

windows11-ltsc_2024-x64

3

mdline/ven...nel.js

windows10-2004-x64

3

mdline/ven...nel.js

windows11-ltsc_2024-x64

3

mdline/ven...che.js

windows10-2004-x64

3

mdline/ven...che.js

windows11-ltsc_2024-x64

3

mdline/ven...he.ps1

windows10-2004-x64

3

mdline/ven...he.ps1

windows11-ltsc_2024-x64

3

mdline/ven...ig.ps1

windows10-2004-x64

3

mdline/ven...ig.ps1

windows11-ltsc_2024-x64

3

mdline/ven...der.js

windows10-2004-x64

3

mdline/ven...der.js

windows11-ltsc_2024-x64

3

mdline/ven...ket.js

windows10-2004-x64

3

mdline/ven...ket.js

windows11-ltsc_2024-x64

3

mdline/ven...ket.js

windows10-2004-x64

3

mdline/ven...ket.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
mdline.zip
Size 3.6MB
Sample260724-php32aywas
SHA256 8174aa05074bfd9a32c13554eb0781c10fc7032a72e383b20608668e47a890f8
MD5 8eb00db76e6eabb555f7734032141b3b
SHA1 a8b09b94269ed5e72bd036fc0589c12c43f0f93d
SHA512 c33aca9230ab5bb81950b4999f2f5ca67ba0d959527abb15f73a9db68316314891bae6802112aaa3148d27c63abd673a5f7a2b3ce22baa68d37f9cdad47cbca1
SSDEEP 49152:FKP2spRv3bdIGiLHCPPmeiz1smkfxjrsnNUA2yINlZmbYt7w7ioLN:Q2sqGiLiPQteCmPXmbYm+g
TLSH
T1D806D056FF0D30E1ED0F3F35B7C89741B565A64300D1AA67E8A2D7945CC32CA0E5AB8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

execution link qr

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

mdline/vendor/amphp/amp/src/CompositeCancellation.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

mdline/vendor/amphp/amp/src/CompositeCancellation.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

mdline/vendor/amphp/amp/src/Future.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

mdline/vendor/amphp/amp/src/Future.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

mdline/vendor/amphp/amp/src/Future/functions.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

mdline/vendor/amphp/amp/src/Future/functions.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

mdline/vendor/amphp/amp/src/Internal/FutureState.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

mdline/vendor/amphp/amp/src/Internal/FutureState.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

mdline/vendor/amphp/amp/src/SignalCancellation.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

mdline/vendor/amphp/amp/src/SignalCancellation.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

mdline/vendor/amphp/amp/src/functions.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

mdline/vendor/amphp/amp/src/functions.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

mdline/vendor/amphp/byte-stream/src/AsyncWriter.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

mdline/vendor/amphp/byte-stream/src/AsyncWriter.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

mdline/vendor/amphp/byte-stream/src/Internal/ChannelParser.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

mdline/vendor/amphp/byte-stream/src/Internal/ChannelParser.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

mdline/vendor/amphp/byte-stream/src/ReadableIterableStream.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

mdline/vendor/amphp/byte-stream/src/ReadableIterableStream.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

mdline/vendor/amphp/byte-stream/src/StreamChannel.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

mdline/vendor/amphp/byte-stream/src/StreamChannel.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

mdline/vendor/amphp/cache/src/AtomicCache.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

mdline/vendor/amphp/cache/src/AtomicCache.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

mdline/vendor/amphp/cache/src/LocalCache.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

mdline/vendor/amphp/cache/src/LocalCache.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

mdline/vendor/amphp/dns/src/DnsConfig.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

mdline/vendor/amphp/dns/src/DnsConfig.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

mdline/vendor/amphp/dns/src/HostLoader.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

mdline/vendor/amphp/dns/src/HostLoader.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

mdline/vendor/amphp/dns/src/Internal/Socket.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

mdline/vendor/amphp/dns/src/Internal/Socket.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

mdline/vendor/amphp/dns/src/Internal/TcpSocket.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

mdline/vendor/amphp/dns/src/Internal/TcpSocket.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Extracted

Language

ps1

Source

URLs

exe.dropper
https://revolt.run/extensions

Targets

- Target
  mdline/vendor/amphp/amp/src/CompositeCancellation.php
- Size 2KB
- SHA256 b36c1d3cdd32a6464aeae59a26f1f9d6610b369356482624b539f94dcdc6e79e
- MD5 e7e95ac5eec18c73364acb98afb7af05
- SHA1 c4c09f169b1e40b881bd1ad104cb786da4cb6498
- SHA512 f842294eb3f4858e4f6d8143d7b9ff5b9ac9999b7267e9f4db6e35bfe26cb71d3a4c85515f7dc760977eb970c77283edd182a8d3ee8751475b93779f9d124206
- TLSH
  T147518CE8FAB6AAE21C67729607CB5202B0795163504D487F78CFC2459FC043C83D399E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  mdline/vendor/amphp/amp/src/Future.php
- Size 7KB
- SHA256 77cfcc7712be37f544175638c997dc3e4d44365e99909283ebd7b146180a1d7c
- MD5 31f3ea7235b3c7a321a9290b3820c65e
- SHA1 e9f261bc9cec821c6b933d37f187a0ff137c2ba8
- SHA512 28c43d1ea2454c817b935d76c944ae84c26495ed3a0b8d67c1582ed60d0732d45159de92db6e2a010c6ba384ce48aff14293240941386264d2afa5bcdfef8283
- SSDEEP 192:vQ3wqTvqzHNJOs3UQ3FHc0WdIfhZfCo/hff/TDk/hhquYvWsvBpL:vE2SC17l
- TLSH
  T160E12F583EFB57168F2331F98B0F51A0E9228613225D4C71389E92B0BF50674DB9DAB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  mdline/vendor/amphp/amp/src/Future/functions.php
- Size 4KB
- SHA256 a9e322f55543e8e5d76f46ce51a0162c4c17de829440fc74d82773aa8cc79670
- MD5 b336492fffbe6070076a7786c7f7d3a8
- SHA1 a715a8001b8ff5bd569e4d5b627bd7c722088e30
- SHA512 f2ab1126d8f9e17e823af75b130b067d25948deb7bd5df4719d1c6e84c3ee6e4d71d69bfc2bdd41a2e79923db2a84743ecc79b0eb6a6d7b3cc653b6e3113555e
- SSDEEP 96:GIGaRZA2GGaESMHB1dGaUSqnVip/NSCyC8VGGGa5eFipunSeLMuGGaMlijjC:G+ZA3MZqnVm/NSCyBKmunXlIjC
- TLSH
  T1E29145FAB97E9B670F1731ED52E84284B750854FA06F0876704F8520BF46C2587EAF58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  mdline/vendor/amphp/amp/src/Internal/FutureState.php
- Size 3KB
- SHA256 c6fb1a529dfb755f09aa57df06e2340d41749b1b852b9640f817926d4d353a44
- MD5 ea242a159af484e417bda7ca67342246
- SHA1 4a2e0968ac256294b8978fa648eed7726dbc3208
- SHA512 eb80facfadc107377d70d974f7b32e39658edd5382ec01fc6f63b582887040e68a40f39a83242b2fb5ea362d2cb077e49e5ca17119cdee131be2afdf9bbc717c
- TLSH
  T1A98122486AFF1DE20A33757A8BCB1180D525711B062C5D727E8D83645F80B788B6EFA9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  mdline/vendor/amphp/amp/src/SignalCancellation.php
- Size 2KB
- SHA256 0bb869e7a8c26c93d550e8dc2dd64746ae5fe51cca7d0cabcf2290f3a69d04d9
- MD5 fe7c60ac7694a374aab38530397d55b5
- SHA1 24f42a7d6ae7faba05ac45fc33ff72ebc606773e
- SHA512 88618808be055a886be8a33cebea1c4f6dec030d739438b66cb50caad8b2ba76a69de8493497722805db44352db4ea9f51aee92798c52f5313b9b1ca4034d7ba
- TLSH
  T1334153F995E225B01C13B2B65BCB12925472A133409918F67CAFC6844F4943C87D2F1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  mdline/vendor/amphp/amp/src/functions.php
- Size 6KB
- SHA256 8353765302347cc8dd35f9fd81d218a6ae0270e728137b494a2e847f71bee4f1
- MD5 9fac94bc3dda4df383e395b7cce4bbb7
- SHA1 eeec3e7cdf68df6c6796b14e786c45368797830a
- SHA512 f476fc5544683831357771c08c63ebdd41d702cfa062ac2aa020dbf39d57548dff863abe12099ace3355b1072bf387151fde6bba69abeab238c88f39f70c5dc1
- SSDEEP 96:wCc+LTCkl/GMj9HIl9vXRn1LSFG1tiiyM/b1Oz:wCc+6kl/rj9olBX54G1TyM/be
- TLSH
  T10AD154987663A3718D7371A74BEB1354BF384253632D84B5785EC7881F8087183E6F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  mdline/vendor/amphp/byte-stream/src/AsyncWriter.php
- Size 3KB
- SHA256 f717480c1a172230ea95383b7abce6e0fd6b17d3c243b87543c2d8920e72099f
- MD5 790b4242e4498ba94d040395bdf1d2e4
- SHA1 1b9ec4567380eb43aa4413c0ff567323198a6f22
- SHA512 8ae1edca000724e47c707d716fd10dc9b3dce3a84b0389f5886aaf917c03a03c7165d79a4a1e915d7653d5b5729f75ea45ffc5ed42aa672c1d16e38f344e4344
- TLSH
  T17171018465FE1AD1D72370F99F2BC2607728D51B216C8E5278FE89911F1022CC6A6F78
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  mdline/vendor/amphp/byte-stream/src/Internal/ChannelParser.php
- Size 2KB
- SHA256 292e69e14d85ec26ac91911f239e44a0538f6ab1a8dfbec7f6982bf1889ff10d
- MD5 6dc161e608136934fe6c8c0b8531a53c
- SHA1 e166e84fc16561d566cd349b2014cde61702a38e
- SHA512 5f3476033617a11a1eaaa4912b78528cf03e3005b84b4d682c04860aa5a0d54e3998ce1589d9b49b9c3e6149aa2e87a4fa30a5512c34868cbb26336eadaaefcd
- TLSH
  T12941139DE6CA4F23C96330F95EB6D48090757217121D58D2FD5E83709FD02A98B61F0D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  mdline/vendor/amphp/byte-stream/src/ReadableIterableStream.php
- Size 2KB
- SHA256 cb49f3d16cf7508064c384288cbe428dcd408631624ee8b9b23b0a701bfc87a3
- MD5 5a3e28bf99ad55b25f39f712e97f75f2
- SHA1 bf91f11653df6f06c77d1af4b4042c8cc85fe38c
- SHA512 f483600dec80160b2d7ee0857f65ab309f1f409e7d566f59f7e7aca2a1c7f86037f91864435bd68bec96753798950f39c48378db6e7c136d92f0d880162cc4e7
- TLSH
  T14551D0A865EA2C52865B70FD8BEA816215226113D15D0CB3FCED8510FFC2538D7B5E3E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  mdline/vendor/amphp/byte-stream/src/StreamChannel.php
- Size 2KB
- SHA256 1db3525604fbcacef129a1df7235413f6d4676d767c9f793d74bf2b339050381
- MD5 eaadd030f907966103fd522bfbe9e60d
- SHA1 7ff45cfcf97b9c71cb36a2a7cb62c93553b7b47b
- SHA512 1c855bd02e5393c6f938e61ce5dfd83716ee4d4422502fba87df26bbcf6d7162c41c09b483cd2d21346f6f604b54ba2687f8dda230d79008f7d50edf47dcb37d
- TLSH
  T10151ED9CF4AA0E63D06331F91FCFA0824471E257921E6DA67CEDC3508FE416C9662F28
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  mdline/vendor/amphp/cache/src/AtomicCache.php
- Size 6KB
- SHA256 a2070275541df0f02a9b6df4136bf8f4cd1774b99c8deceecb21a46f37a590c3
- MD5 9788d37a2a75c8e94b3205ee03a79566
- SHA1 5052988614a14ed481a28c057d78dcd89ba56038
- SHA512 769ced55239397bd55f286628e1de6431d6a5ca9ea5f0186ec41fe32077ec9407284fdef040622fd27495cf2e2b853baa38782cb648ea39ba94ff63da33f3d0c
- SSDEEP 192:o3QdCaQg0ulKVwSg5ElbUF25gzhufPuOricYByxh:OimUKZbUnybDh
- TLSH
  T1D3D12319BAE69631096330F60B0E11C1DE319A2B236B1CE2BC9DC6241F45734C7BBBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  mdline/vendor/amphp/cache/src/LocalCache.php
- Size 4KB
- SHA256 ff16244b6804dc0e764df67dfc64289f2464db58c30759bac4b43b55d04b57fc
- MD5 623fda7fc3bc1302734dc74e979b231e
- SHA1 19d1e65b9a51e9f31245bc27d4d3a62110eefdfc
- SHA512 46b62c13cd7ae88e90d9c81d2991fa4dc346cd599aa09c8f461899be99b1db36e723750eada55a5a3f0268594a1ff97839260496da44ef72ee2ccb8c26d9d68b
- SSDEEP 48:qbGBYpl3aHMPV50+DNjsITnr+5y/ZRryj0LGeVtDiaHe6BUCHrqIIZ2tbykk7mXX:WpFaH2V50+D9sy33QAjDsCHuwLrn3L
- TLSH
  T10DA1201D228A5CEA2C3770B91B8FE061455A6117136E4E9378CE06580F529FCE6ECF7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  mdline/vendor/amphp/dns/src/DnsConfig.php
- Size 4KB
- SHA256 7cac9155111edd72a4abff813f4259be51b8129c2a5e778571570990abac8ef2
- MD5 d0f02073b7d9d0b02fa59ac3c48b464e
- SHA1 a718f99e5274eb7bdad27942ca2d6894e1968318
- SHA512 f0ab5d08a38014abf0d1e1a6f1bb8e53586049bcfb51544a050ec2ebe60405d97ada80a1e15eba179e43e39c48bac10663998ae5e2704fbfaaffe8fe08d6c0f0
- SSDEEP 48:Frm4Xrg/ZRDghdRyOCe8WOJkD/QBIVl635RT+E/l//M/Ub+zLUHmzfGPQZIKzPCp:HE3kYemJqIB+6pRTTxv8C9L
- TLSH
  T12891141C7497A66300B73078ABCF81467ABD928B0C0D8D117D6D43813FD5928EAE6F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  mdline/vendor/amphp/dns/src/HostLoader.php
- Size 2KB
- SHA256 eff58db586e62e23f26f6e683e512617f0cbfcbb7476708857c3a93f8e6443ca
- MD5 020ffa993048b7010061bc9adaeaa70b
- SHA1 4652a42b6c2c8b234d2ddf42fdbacf319d613dcf
- SHA512 16c12915fc23e829dfc7cd3984fc691620e12d6c10f48d291af9136c01490374ac03fa28a025fde46ab206cedd066f41a167c7e0ca123b971a5b4598e5d725fd
- TLSH
  T141412D4E78EAA9A2865331350F8F54862476C0B3022C5E43FCAD4384AFD043C8AF5FAC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  mdline/vendor/amphp/dns/src/Internal/Socket.php
- Size 9KB
- SHA256 9e20be7e7894ae3ebae53df207338ceee3c1bdeecf2c524f51cba7dd911dbea7
- MD5 1703450729704ec98cb43b2328fc67ee
- SHA1 3bdb03e280d14bfbe3248b75995f0b7ef0341015
- SHA512 fef5b087efbd39931e45285311a311557eb782182ee830d0d8a4f15e96a28a764fd4543a98965192f08d2ebd89860056ee3f5695f01ae9f9fa91f2d820a7f60b
- SSDEEP 192:jJaQxJQ4qa+QUT4U6S5yEdSjFXvgoRZJeJ2PXlp:jH2Ja+jGEcdtK8X/
- TLSH
  T18D12225974EA9DB2917330FAEF9BA2126435A213322C5897BCED43D06F8037CD761B19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  mdline/vendor/amphp/dns/src/Internal/TcpSocket.php
- Size 2KB
- SHA256 7af5f6cf30e547111654c41230fb3d51b9430d51eafea55656eb15f82a7896ce
- MD5 94583c6746b6fc08384113163678f2d2
- SHA1 937697f10850e77060595067a246c7ecc662870a
- SHA512 f140df38a07d92d11230ff0982e9144a2757fb331e4ba09501e8b821e2bc74dc1d057a4d851ba5b57bb2551d26c734a586a6e385798fa602bc7e013f098e974d
- TLSH
  T1FC5101D964EF8D61903334EA5F2F9015787AA137132D89A3F9AF4380AF81358D3C6A1C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy