Command and Scripting Interpreter T1059
Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface…
- Tactics
- Execution
- Actors using it
- 126
- Sub-techniques
- 9
Ransomware groups reported using it
N0nthegentlemenqilinincransomakirasafepayplayrhysidaMajinahanashipearnightspireclopnitrogen
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Medusa Group52 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- ChimeraChina · 49 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- APT29Russia · IRON RITUAL, IRON HEMLOCK, NobleBaron · 47 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- BlackByteHecamede · 44 techniques
- Salt TyphoonChina · 43 techniques
- TeamTNT43 techniques
- FIN13Elephant Beetle · 42 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- ShinyHuntersUNC6240, Bling Libra · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- HAFNIUMChina · Operation Exchange Marauder, Silk Typhoon · 37 techniques
- UNC3886China · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Contagious InterviewDeceptiveDevelopment, Gwisin Gang, Tenacious Pungsan · 34 techniques
- Storm-050134 techniques
- Earth LuscaChina · TAG-22, Charcoal Typhoon, CHROMIUM · 34 techniques
- FIN6Magecart Group 6, ITG08, Skeleton Spider · 33 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RedCurlRussia · 32 techniques
- Fox KittenIran · UNC757, Parisite, Pioneer Kitten · 31 techniques
- FIN8Syssphinx · 31 techniques
- TeamPCPPCPCat, ShellForce, DeadCatx3 · 30 techniques
- RockeChina · 29 techniques
- APT42Iran · 29 techniques
- HEXANELyceum, Siamesekitten, Spirlin · 29 techniques
- Indrik SpiderRussia · Evil Corp, Manatee Tempest, DEV-0243 · 27 techniques
- GALLIUMChina · Granite Typhoon · 27 techniques
- Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques
- Storm-181125 techniques
- ZIRCONIUMChina · APT31, Violet Typhoon · 25 techniques
- APT37North Korea · InkySquid, ScarCruft, Reaper · 25 techniques
- Aquatic PandaChina · 25 techniques
- APT-C-36Blind Eagle, TAG-144, AguilaCiega · 25 techniques
- INC RansomGOLD IONIC · 25 techniques
- SilenceWhisper Spider · 25 techniques
- HigaisaSouth Korea · 24 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- ToddyCat24 techniques
- SidewinderIndia · T-APT-04, Rattlesnake · 23 techniques
- APT33Iran · HOLMIUM, Elfin, Peach Sandstorm · 23 techniques
- Sea TurtleTürkiye · Teal Kurma, Marbled Dust, Cosmic Wolf · 22 techniques
- Winter VivernTA473, UAC-0114 · 22 techniques
- DarkhotelSouth Korea · DUBNIUM, Zigzag Hail · 22 techniques
- APT5China · Mulberry Typhoon, MANGANESE, BRONZE FLEETWOOD · 22 techniques
- Velvet Ant22 techniques
- Play22 techniques
- WIRTEAshen Lepus · 21 techniques
- TA254120 techniques
- APT1China · Comment Crew, Comment Group, Comment Panda · 20 techniques
- AgriusIran · Pink Sandstorm, AMERICIUM, Agonizing Serpens · 20 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- Blue Mockingbird19 techniques
- APT19China · Codoso, C0d0so0, Codoso Team · 18 techniques
- AkiraGOLD SAHARA, PUNK SPIDER, Howling Scorpius · 17 techniques
- DaggerflyChina · Evasive Panda, BRONZE HIGHLAND · 17 techniques
- ConfuciusConfucius APT · 16 techniques
- Cinnamon TempestChina · DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT · 16 techniques
- Star BlizzardRussia · SEABORGIUM, Callisto Group, TA446 · 16 techniques
- SideCopyPakistan · 15 techniques
- CURIUMIran · Crimson Sandstorm, TA456, Tortoise Shell · 15 techniques
- LeafminerIran · Raspite · 14 techniques
- WindshiftBahamut · 14 techniques
- Tonto TeamChina · Earth Akhlut, BRONZE HUNTLEY, CactusPete · 14 techniques
- Saint BearRussia · Storm-0587, TA471, UAC-0056 · 13 techniques
- Stealth Falcon13 techniques
- LazyScripter13 techniques
- admin@338China · 12 techniques
- Gorgon GroupPakistan · 12 techniques
- MoleratsOperation Molerats, Gaza Cybergang · 12 techniques
- Transparent TribePakistan · COPPER FIELDSTONE, APT36, Mythic Leopard · 12 techniques
- Evilnum11 techniques
- APT18TG-0416, Dynamite Panda, Threat Group-0416 · 11 techniques
- FIN511 techniques
- Dark CaracalLebanon · 11 techniques
- TA551GOLD CABIN, Shathak · 11 techniques
- MalteiroBrazil · 11 techniques
- DarkVishnya10 techniques
- Deep PandaChina · Shell Crew, WebMasters, KungFu Kittens · 10 techniques
- Whitefly9 techniques
- GOLD SOUTHFIELDPinchy Spider · 9 techniques
- FIN49 techniques
- Sowbug9 techniques
- FIN109 techniques
- Metador8 techniques
- Rancor8 techniques
- MacheteSpain · APT-C-43, El Machete · 7 techniques
- Windigo7 techniques
- DarkHydrus7 techniques
- MoustachedBouncer7 techniques
- Poseidon Group7 techniques
- CopyKittensIran · 7 techniques
- Gallmaker6 techniques
- Nomadic OctopusRussia · DustSquad · 6 techniques
- TA5775 techniques
- SuckflyChina · 5 techniques
- TA4594 techniques
- TA5784 techniques
- Threat Group-1314TG-1314 · 4 techniques
- Thrip4 techniques