Living Off the Land (LOTL) Attacks: Detect Ransomware Gangs - ThreatDown by Malwarebytes
Tags
attack-pattern: Data Direct Artificial Intelligence - T1588.007 Data Manipulation - T1565 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Local Account - T1087.001 Local Account - T1136.001 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Network Service Scanning - T1423 Powershell - T1059.001 Windows Service - T1543.003 Tool - T1588.002 Network Service Scanning - T1046 Powershell - T1086 Scripting - T1064 Network Service Scanning Scripting
Show in Graph
Common Information
Type Value
UUID 36cc3781-51c5-4442-a08e-83a1c4c2f29b
Fingerprint b401639499b13e63
Analysis status DONE
Considered CTI value 2
Text language
Published April 14, 2025, 11:34 a.m.
Added to db April 14, 2025, 2:38 p.m.
Last updated April 17, 2025, 9:18 p.m.
Headline Living off the Land (LOTL) attacks: Detecting ransomware gangs hiding in plain sight
Title Living Off the Land (LOTL) Attacks: Detect Ransomware Gangs - ThreatDown by Malwarebytes
Detected Hints/Tags/Attributes 66/1/5
Source URLs
Redirection Url
Details Source https://www.threatdown.com/blog/living-off-the-land-lotl-attacks-detecting-ransomware-gangs-hiding-in-plain-sight/
URL Provider
Details Provider Source level domain
Details threatdown.com www.threatdown.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 474 ✔ Blog – ThreatDown by Malwarebytes https://www.threatdown.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details MITRE ATT&CK Techniques 209 
T1046
Details MITRE ATT&CK Techniques 37 
T1565
Details MITRE ATT&CK Techniques 71 
T1136.001
Details MITRE ATT&CK Techniques 606 
T1059.001
Details MITRE ATT&CK Techniques 133 
T1204.001