CL-STA-0048
Also reported as CL STA 0048. Linked to China by two sources.
Reports per quarter
Techniques seen in the last two years
- T1003.001 1 report
- T1003.002 1 report
- T1005 1 report
- T1008 1 report
- T1027 1 report
- T1036.005 1 report
- T1041 1 report
- T1053.005 1 report
- T1059.001 1 report
- T1059.003 1 report
Show all 39 techniques Show fewer
- T1068 1 report
- T1078 1 report
- T1078.003 1 report
- T1087.001 1 report
- T1087.002 1 report
- T1095 1 report
- T1098.007 1 report
- T1104 1 report
- T1105 1 report
- T1132.001 1 report
- T1136.001 1 report
- T1140 1 report
- T1190 1 report
- T1482 1 report
- T1505.003 1 report
- T1570 1 report
- T1571 1 report
- T1573.001 1 report
- T1574.001 1 report
- T1583.001 1 report
- T1583.003 1 report
- T1587.001 1 report
- T1590 1 report
- T1592 1 report
- T1595.001 1 report
- T1595.002 1 report
- T1608.001 1 report
- T1608.002 1 report
- T1620 1 report
Counts come from technique IDs in the actor's report text.
CVEs named in reports
- CVE-2021-26855 KEV ransomware
- CVE-2021-26857 KEV ransomware
- CVE-2021-27065 KEV ransomware
- CVE-2022-42475 KEV ransomware
- CVE-2022-47966 KEV ransomware
- CVE-2023-46747 KEV ransomware
- CVE-2023-46805 KEV ransomware
- CVE-2024-1709 KEV ransomware
- CVE-2024-21887 KEV ransomware
- CVE-2024-36401 KEV
- CVE-2024-8963 KEV
- CVE-2024-9379 KEV
Show all 15 CVEs Show fewer
- CVE-2024-9380 KEV
- CVE-2024-9381
- CVE-2025-31324 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor MimiKatz (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor PlugX (Malware Family)
Newest first. Details opens the report in Explore.