Malware
BloodAlchemy
This malware family is the suspected successor to ShadowPad and Deed rat.
MITRE ATT&CK TTPs 32
T1003 T1018 T1021 T1021.001 T1046 T1048 T1059 T1059.001 T1069 T1071 T1071.001 T1078 T1082 T1083 T1087 T1090 T1098 T1105 T1110 T1114 T1133 T1485 T1490 T1495 T1558 T1566 T1583 T1584 T1585 T1586 T1587 T1588
OS Credential Dumping
Credential Access
Remote System Discovery
Discovery
Remote Services
Lateral Movement
Remote Desktop Protocol
Lateral Movement
Network Service Discovery
Discovery
Exfiltration Over Alternative Protocol
Exfiltration
Command and Scripting Interpreter
Execution
PowerShell
Execution
Permission Groups Discovery
Discovery
Application Layer Protocol
Command And Control
Web Protocols
Command And Control
Valid Accounts
Defense Evasion
System Information Discovery
Discovery
File and Directory Discovery
Discovery
Account Discovery
Discovery
Proxy
Command And Control
Account Manipulation
Persistence
Ingress Tool Transfer
Command And Control
Brute Force
Credential Access
Email Collection
Collection
External Remote Services
Persistence
Data Destruction
Impact
Inhibit System Recovery
Impact
Firmware Corruption
Impact
Steal or Forge Kerberos Tickets
Credential Access
Phishing
Initial Access
Acquire Infrastructure
Resource Development
Compromise Infrastructure
Resource Development
Establish Accounts
Resource Development
Compromise Accounts
Resource Development
Develop Capabilities
Resource Development
Obtain Capabilities
Resource Development