Modify Registry T1112
Adversaries may interact with the Windows Registry as part of a variety of other techniques to aid in defense evasion, persistence, and execution. Access to specific areas of the Registry depends on account permissions, with some keys requiring administrator-level access. The built-in Windows…
- Tactics
- Defense Impairment, Persistence
- Actors using it
- 29
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- Medusa Group52 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- Wizard SpiderRussia · UNC1878, TEMP.MixMaster, Grim Spider · 49 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- BlackByteHecamede · 44 techniques
- Ember BearRussia · UNC2589, Bleeding Bear, DEV-0586 · 39 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Earth LuscaChina · TAG-22, Charcoal Typhoon, CHROMIUM · 34 techniques
- FIN8Syssphinx · 31 techniques
- APT42Iran · 29 techniques
- Indrik SpiderRussia · Evil Corp, Manatee Tempest, DEV-0243 · 27 techniques
- Aquatic PandaChina · 25 techniques
- SilenceWhisper Spider · 25 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- LuminousMothChina · 24 techniques
- Blue Mockingbird19 techniques
- APT19China · Codoso, C0d0so0, Codoso Team · 18 techniques
- Lotus BlossomDRAGONFISH, Spring Dragon, RADIUM · 17 techniques
- Saint BearRussia · Storm-0587, TA471, UAC-0056 · 13 techniques
- Gorgon GroupPakistan · 12 techniques