← Back to Actors
Storm-0501
Storm-0501
[Storm-0501](https://attack.mitre.org/groups/G1053) is a financially motivated cyber criminal group that uses commodity and open-source tools to conduct ransomware operations. [Storm-0501](https://attack.mitre.org/groups/G1053) has been active since 2021 and has previously been affiliated with Sabbath Ransomware and other Ransomware-as-a-Service (RaaS) variants such as Hive, [BlackCat](https://attack.mitre.org/software/S1068), Hunters International, [LockBit 3.0](https://attack.mitre.org/software/S1202), and [Embargo](https://attack.mitre.org/software/S1247) ransomware.(Citation: Avertium Stor...
42
Techniques
41
Covered
1
Gaps
98%
Coverage
Coverage41/42
GAPS (1)
COVERED (41)
T1003OS Credential Dumping114 det.T1003.006DCSync16 det.T1021.006Windows Remote Management22 det.T1021.007Cloud Services12 det.T1027.002Software Packing2 det.T1036.004Masquerade Task or Service7 det.T1053.005Scheduled Task100 det.T1057Process Discovery23 det.T1059.001PowerShell376 det.T1059.009Cloud API6 det.T1078.004Cloud Accounts188 det.T1082System Information Discovery88 det.T1087.002Domain Account58 det.T1087.004Cloud Account23 det.T1098.001Additional Cloud Credentials27 det.T1098.003Additional Cloud Roles56 det.T1110Brute Force93 det.T1190Exploit Public-Facing Application233 det.T1218.010Regsvr3243 det.T1218.011Rundll3276 det.T1219.002Remote Desktop Software53 det.T1482Domain Trust Discovery41 det.T1484.001Group Policy Modification19 det.T1484.002Trust Modification14 det.T1485Data Destruction97 det.T1486Data Encrypted for Impact394 det.T1490Inhibit System Recovery63 det.T1518.001Security Software Discovery11 det.T1526Cloud Service Discovery33 det.T1530Data from Cloud Storage33 det.T1537Transfer Data to Cloud Account27 det.T1552.004Private Keys23 det.T1555.005Password Managers4 det.T1555.006Cloud Secrets Management Stores8 det.T1556.009Conditional Access Policies5 det.T1567.002Exfiltration to Cloud Storage31 det.T1578.003Delete Cloud Instance1 det.T1580Cloud Infrastructure Discovery26 det.T1587.003Digital Certificates1 det.T1614.001System Language Discovery2 det.T1657Financial Theft15 det.