HEXANE

MITRE
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

[HEXANE](https://attack.mitre.org/groups/G1001) is a cyber espionage threat group that has targeted oil & gas, telecommunications, aviation, and internet service provider organizations since at least 2017. Targeted companies have been located in the Middle East and Africa, including Israel, Saudi Arabia, Kuwait, Morocco, and Tunisia. [HEXANE](https://attack.mitre.org/groups/G1001)'s TTPs appear similar to [APT33](https://attack.mitre.org/groups/G0064) and [OilRig](https://attack.mitre.org/groups/G0049) but due to differences in victims and tools it is tracked as a separate entity.(Citation: Dragos Hexane)(Citation: Kaspersky Lyceum October 2021)(Citation: ClearSky Siamesekitten August 2021)(Citation: Accenture Lyceum Targets November 2021)

MITRE ATT&CK: View on MITRE
Techniques Used (36)
ID ATT&CK Tactics
T1010 Application Window Discovery -
T1016 System Network Configuration Discovery -
T1016.001 Internet Connection Discovery -
T1018 Remote System Discovery -
T1021.001 Remote Desktop Protocol -
T1027.010 Command Obfuscation -
T1033 System Owner/User Discovery -
T1049 System Network Connections Discovery -
T1053.005 Scheduled Task -
T1056.001 Keylogging -
T1057 Process Discovery -
T1059.001 PowerShell -
T1059.005 Visual Basic -
T1069.001 Local Groups -
T1082 System Information Discovery -
Aliases (312)
Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin Lyceum Siamesekitten Spirlin
Related Malware (12)
BITSAdmin
tool
DanBot
other
DnsSystem
other
Empire
tool
ipconfig
tool
Kevin
other
Milan
other
Mimikatz
tool
netstat
tool
Ping
tool
Metadata
ID: 883
Created: 13/01/2026 17:48
Updated: 06/03/2026 04:00