TeamTNT

Known techniques

• T1007System Service Discovery
• T1014Rootkit
• T1016System Network Configuration Discovery
• T1021.004SSH
• T1027.002Software Packing
• T1027.013Encrypted/Encoded File
• T1036Masquerading
• T1036.005Match Legitimate Resource Name or Location
• T1046Network Service Discovery
• T1048Exfiltration Over Alternative Protocol
• T1049System Network Connections Discovery
• T1057Process Discovery
• T1059.001PowerShell
• T1059.003Windows Command Shell
• T1059.004Unix Shell
• T1059.009Cloud API
• T1059.013Container CLI/API
• T1070.003Clear Command History
• T1070.004File Deletion
• T1071Application Layer Protocol
• T1071.001Web Protocols
• T1074.001Local Data Staging
• T1082System Information Discovery
• T1083File and Directory Discovery
• T1098.004SSH Authorized Keys
• T1102Web Service
• T1105Ingress Tool Transfer
• T1120Peripheral Device Discovery
• T1133External Remote Services
• T1136.001Local Account
• T1140Deobfuscate/Decode Files or Information
• T1204.003Malicious Image
• T1219Remote Access Tools
• T1222.002Linux and Mac Permissions
• T1496.001Compute Hijacking
• T1518.001Security Software Discovery
• T1543.002Systemd Service
• T1543.003Windows Service
• T1547.001Registry Run Keys / Startup Folder
• T1552.001Credentials In Files

Malware and tools used