Obfuscated Files or Information T1027
Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses. Payloads may be…
- Tactics
- Stealth
- Actors using it
- 96
- Sub-techniques
- 9
Ransomware groups reported using it
N0nthegentlemenqilinakirasafepayplayrhysidaeverestpayloadpearnightspiresarcomanitrogen
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Medusa Group52 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- ChimeraChina · 49 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- Salt TyphoonChina · 43 techniques
- TeamTNT43 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- UNC3886China · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- Storm-050134 techniques
- Earth LuscaChina · TAG-22, Charcoal Typhoon, CHROMIUM · 34 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- Fox KittenIran · UNC757, Parisite, Pioneer Kitten · 31 techniques
- FIN8Syssphinx · 31 techniques
- TeamPCPPCPCat, ShellForce, DeadCatx3 · 30 techniques
- RockeChina · 29 techniques
- HEXANELyceum, Siamesekitten, Spirlin · 29 techniques
- GALLIUMChina · Granite Typhoon · 27 techniques
- Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques
- Storm-181125 techniques
- ZIRCONIUMChina · APT31, Violet Typhoon · 25 techniques
- APT37North Korea · InkySquid, ScarCruft, Reaper · 25 techniques
- Aquatic PandaChina · 25 techniques
- APT-C-36Blind Eagle, TAG-144, AguilaCiega · 25 techniques
- SilenceWhisper Spider · 25 techniques
- HigaisaSouth Korea · 24 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- SidewinderIndia · T-APT-04, Rattlesnake · 23 techniques
- Moonstone SleetNorth Korea · Storm-1789 · 23 techniques
- APT33Iran · HOLMIUM, Elfin, Peach Sandstorm · 23 techniques
- Sea TurtleTürkiye · Teal Kurma, Marbled Dust, Cosmic Wolf · 22 techniques
- DarkhotelSouth Korea · DUBNIUM, Zigzag Hail · 22 techniques
- Play22 techniques
- WIRTEAshen Lepus · 21 techniques
- TA254120 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- Blue Mockingbird19 techniques
- APT19China · Codoso, C0d0so0, Codoso Team · 18 techniques
- AkiraGOLD SAHARA, PUNK SPIDER, Howling Scorpius · 17 techniques
- BITTERT-APT-17 · 16 techniques
- LeafminerIran · Raspite · 14 techniques
- WindshiftBahamut · 14 techniques
- Saint BearRussia · Storm-0587, TA471, UAC-0056 · 13 techniques
- BackdoorDiplomacy13 techniques
- LazyScripter13 techniques
- The GentlemenStorm-2697, GOLD SHERWOOD · 13 techniques
- AndarielNorth Korea · Silent Chollima, PLUTONIUM, Onyx Sleet · 12 techniques
- Moses StaffIran · DEV-0500, Marigold Sandstorm · 12 techniques
- MoleratsOperation Molerats, Gaza Cybergang · 12 techniques
- Transparent TribePakistan · COPPER FIELDSTONE, APT36, Mythic Leopard · 12 techniques
- APT18TG-0416, Dynamite Panda, Threat Group-0416 · 11 techniques
- Dark CaracalLebanon · 11 techniques
- TA551GOLD CABIN, Shathak · 11 techniques
- MalteiroBrazil · 11 techniques
- Deep PandaChina · Shell Crew, WebMasters, KungFu Kittens · 10 techniques
- Aoqin DragonChina · 9 techniques
- Whitefly9 techniques
- GOLD SOUTHFIELDPinchy Spider · 9 techniques
- Metador8 techniques
- The White Company7 techniques
- MoustachedBouncer7 techniques
- ElderwoodChina · Elderwood Gang, Beijing Group, Sneaky Panda · 6 techniques
- Gallmaker6 techniques
- TA5775 techniques
- Putter PandaChina · APT2, MSUpdater · 4 techniques
- Group5Iran · 4 techniques
- MofangChina · 3 techniques
- Moafee1 techniques
- BlackOasis1 techniques