Skip to content

Rancor

Rancor is a threat group that has led targeted campaigns against the South East Asia region. Rancor uses politically-motivated lures to entice victims to open malicious documents.

ATT&CK ID: G0075
Techniques: 8
Tools: 4

Techniques

Initial Access

Execution

Scheduled Task/Job Command and Scripting Interpreter User Execution

Persistence

Scheduled Task/Job Event Triggered Execution

Privilege Escalation

Scheduled Task/Job Event Triggered Execution

Stealth

System Binary Proxy Execution

Command and Control

Application Layer Protocol Ingress Tool Transfer

Software

DDKONG · PLAINTEE · Reg · certutil

MITRE ATT&CK All threat actors