The GRU's Disruptive Playbook | Mandiant
Tags
country: Georgia Saudi Arabia Poland Yemen Romania Russia Ukraine
attack-pattern: Data Direct Defacement - T1491 Domains - T1583.001 Domains - T1584.001 Impair Defenses - T1562 Impair Defenses - T1629 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Scheduled Task - T1053.005 Social Media - T1593.001 Software - T1592.002 Systemd Service - T1543.002 Systemd Service - T1501 Tool - T1588.002 Vulnerabilities - T1588.006 Powershell - T1086 Scheduled Task - T1053 Denial Of Service
Show in Graph
Common Information
Type Value
UUID 3ae036de-d981-4f16-bd60-188c3161cd91
Fingerprint 6495b853419197e3
Analysis status DONE
Considered CTI value 1
Text language
Published July 12, 2023, midnight
Added to db Oct. 22, 2023, 11:11 p.m.
Last updated Oct. 17, 2024, 7:10 p.m.
Headline The GRU's Disruptive Playbook
Title The GRU's Disruptive Playbook | Mandiant
Detected Hints/Tags/Attributes 108/2/5
Source URLs
Redirection Url
Details Source https://www.mandiant.com/resources/blog/gru-disruptive-playbook
URL Provider
Details Provider Source level domain
Details mandiant.com www.mandiant.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 330 ✔ Threat Intelligence https://www.mandiant.com/resources/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 6 
files.xml
Details File 13 
scheduledtasks.xml
Details File 3 
caclcly.exe
Details File 2 
caclclx.exe
Details Mandiant Uncategorized Groups 6 
UNC3810