Deobfuscate/Decode Files or Information T1140
Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using…
- Tactics
- Stealth
- Actors using it
- 38
- Sub-techniques
- 0
Ransomware groups reported using it
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- TurlaRussia · IRON HUNTER, Group 88, Waterbug · 50 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- BlackByteHecamede · 44 techniques
- TeamTNT43 techniques
- FIN13Elephant Beetle · 42 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- Ke3changChina · APT15, Mirage, Vixen Panda · 37 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- Earth LuscaChina · TAG-22, Charcoal Typhoon, CHROMIUM · 34 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RockeChina · 29 techniques
- Storm-181125 techniques
- ZIRCONIUMChina · APT31, Violet Typhoon · 25 techniques
- HigaisaSouth Korea · 24 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- Moonstone SleetNorth Korea · Storm-1789 · 23 techniques
- Winter VivernTA473, UAC-0114 · 22 techniques
- DarkhotelSouth Korea · DUBNIUM, Zigzag Hail · 22 techniques
- WIRTEAshen Lepus · 21 techniques
- AgriusIran · Pink Sandstorm, AMERICIUM, Agonizing Serpens · 20 techniques
- APT19China · Codoso, C0d0so0, Codoso Team · 18 techniques
- Cinnamon TempestChina · DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT · 16 techniques
- Gorgon GroupPakistan · 12 techniques
- MoleratsOperation Molerats, Gaza Cybergang · 12 techniques
- MalteiroBrazil · 11 techniques