GroupProfiles: BlackSuit.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
BlackSuit's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| AdFind | AnyDesk | Eraser | AccountRestore | Cobalt Strike | Chisel | PsExec | RClone |
| Advanced IP Scanner | Atera | GMER | Mimikatz| Brute Ratel C4 | Cloudflared | | |
| SharpShares | LogMeIn | | NirSoft Dialupass | | OpenSSH | | |
| SoftPerfect NetScan | MobaXterm | | NirSoft IEPassView (iepv) | | | | |
| | | | NirSoft MailPassView | | | | |
| | | | NirSoft Netpass | | | | |
| | | | NirSoft RouterPassView | | | | |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to BlackSuit (previously Royal) ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 10 February 2025 | https://connect.cybercx.com.au/dfir-threat-report-au-2025 |
| 7 August 2024 | https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-061a |