GroupProfiles: BianLian.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
BianLian's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| Advanced IP Scanner | AmmyyAdmin | | RDP Recognizer | Impacket | | PsExec | MEGA |
| PingCastle | AnyDesk | | | | | | RClone |
| SharpShares | Atera | | | | | | |
| SoftPerfect NetScan | ScreenConnect | | | | | | |
| WKTools | Splashtop | | | | | | |
| | TeamViewer | | | | | | |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to BianLian ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 26 March 2025 | https://www.welivesecurity.com/en/eset-research/shifting-sands-ransomhub-edrkillshifter/ |
| 16 May 2023 | https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-136a |