FIN8

MISP
Tipo:
Unknown
Paese:
Unknown
Prima attivita:
Unknown
Dettagli:

FIN8 is a financially motivated group targeting the retail, hospitality and entertainment industries. The actor had previously conducted several tailored spearphishing campaigns using the downloader PUNCHBUGGY and POS malware PUNCHTRACK.

MITRE ATT&CK: View on MITRE
Tecniche Utilizzate (36)
ID ATT&CK Tattiche
T1003.001 LSASS Memory -
T1016.001 Internet Connection Discovery -
T1018 Remote System Discovery -
T1021.001 Remote Desktop Protocol -
T1021.002 SMB/Windows Admin Shares -
T1027.010 Command Obfuscation -
T1033 System Owner/User Discovery -
T1047 Windows Management Instrumentation -
T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol -
T1053.005 Scheduled Task -
T1055.004 Asynchronous Procedure Call -
T1059.001 PowerShell -
T1059.003 Windows Command Shell -
T1068 Exploitation for Privilege Escalation -
T1070.001 Clear Windows Event Logs -
Riferimenti (6)
Alias (315)
ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061 Syssphinx ATK113 G0061
Malware Utilizzato (11)
BADHATCH
other
dsquery
tool
Impacket
tool
Net
tool
Nltest
tool
Ping
tool
PsExec
tool
PUNCHBUGGY
other
PUNCHTRACK
other
Ragnar Locker
other
Metadata
ID: 115
Created: 13/01/2026 17:48
Updated: 07/03/2026 04:00