Hijack Execution Flow T1574
Adversaries may execute their own malicious payloads by hijacking the way operating systems run programs. Hijacking execution flow can be for the purposes of persistence, since this hijacked execution may reoccur over time. Adversaries may also use these mechanisms to elevate privileges or evade…
- Tactics
- Stealth, Execution
- Actors using it
- 38
- Sub-techniques
- 3
Ransomware groups reported using it
Threat actors
- Lazarus GroupNorth Korea · Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace · 69 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- APT32Vietnam · SeaLotus, OceanLotus, APT-C-00 · 55 techniques
- ChimeraChina · 49 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- Threat Group-3390China · Earth Smilodon, TG-3390, Emissary Panda · 47 techniques
- NIMBUS MANTICOREUNC1549, TA455, COBALT SMOKEY · 45 techniques
- FIN13Elephant Beetle · 42 techniques
- APT3China · Gothic Panda, Pirpi, UPS Team · 40 techniques
- menuPassChina · Cicada, POTASSIUM, Stone Panda · 37 techniques
- MirrorFaceChina · Earth Kasha · 37 techniques
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Earth LuscaChina · TAG-22, Charcoal Typhoon, CHROMIUM · 34 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- RockeChina · 29 techniques
- GALLIUMChina · Granite Typhoon · 27 techniques
- Storm-181125 techniques
- Aquatic PandaChina · 25 techniques
- APT-C-36Blind Eagle, TAG-144, AguilaCiega · 25 techniques
- HigaisaSouth Korea · 24 techniques
- LuminousMothChina · 24 techniques
- SidewinderIndia · T-APT-04, Rattlesnake · 23 techniques
- Velvet Ant22 techniques
- WIRTEAshen Lepus · 21 techniques
- Blue Mockingbird19 techniques
- APT19China · Codoso, C0d0so0, Codoso Team · 18 techniques
- DaggerflyChina · Evasive Panda, BRONZE HIGHLAND · 17 techniques
- Cinnamon TempestChina · DEV-0401, Emperor Dragonfly, BRONZE STARLIGHT · 16 techniques
- SideCopyPakistan · 15 techniques
- Tonto TeamChina · Earth Akhlut, BRONZE HUNTLEY, CactusPete · 14 techniques
- NaikonChina · 13 techniques
- BackdoorDiplomacy13 techniques
- Evilnum11 techniques
- BlackTechChina · Palmerworm · 10 techniques
- Whitefly9 techniques
- RTM7 techniques