GroupProfiles: BlackBasta.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
Black Basta's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| AdFind | AnyDesk | Backstab | Mimikatz | Brute Ratel (BRc4) | | BITSAdmin | Rclone |
| Bloodhound | Atera | | | Cobalt Strike | | PsExec | Qaz[.]im |
| PowerView | NetSupport | | | Metasploit | | | |
| PSNmap | ScreenConnect | | | PowerSploit| | | |
| SoftPerfect NetScan | Splashtop | | | | | | |
| | Supremo | | | | | | |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to Black Basta ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 29 July 2024 | https://cloud.google.com/blog/topics/threat-intelligence/unc4393-goes-gently-into-silentnight |
| 10 May 2024 | https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-131a |
| 12 October 2022 | https://www.trendmicro.com/en_ca/research/22/j/black-basta-infiltrates-networks-via-qakbot-brute-ratel-and-coba.html |