BelialDemon

Reports per quarter

Techniques seen in the last two years

• T1005 1 report
• T1036 1 report
• T1059.001 1 report
• T1059.010 1 report
• T1071.001 1 report
• T1090.002 1 report
• T1105 1 report
• T1189 1 report
• T1204.002 1 report
• T1204.004 1 report

Counts come from technique IDs in the actor's report text.

Reports

1. 9 December 2025

   GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries

2. 30 April 2024

   TLP-CLEAR-Matanbuchus-Co-Code-Emulation-and-Cybercrime-Infrastructure-Discovery-1.pdf

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor TLP-CLEAR-Matanbuchus-Co-Code-Emulation-and-Cybercrime-Infrastructure-Discovery-1.pdf

3. 16 June 2021

   Matanbuchus- Malware-as-a-Service with Demonic Intentions

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Matanbuchus- Malware-as-a-Service with Demonic Intentions

4. 16 June 2021

   Matanbuchus: Malware-as-a-Service with Demonic Intentions

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Matanbuchus: Malware-as-a-Service with Demonic Intentions

Newest first. Details opens the report in Explore.