← Back to Actors
Storm-0501
Storm-0501
[Storm-0501](https://attack.mitre.org/groups/G1053) is a financially motivated cyber criminal group that uses commodity and open-source tools to conduct ransomware operations. [Storm-0501](https://attack.mitre.org/groups/G1053) has been active since 2021 and has previously been affiliated with Sabbath Ransomware and other Ransomware-as-a-Service (RaaS) variants such as Hive, [BlackCat](https://attack.mitre.org/software/S1068), Hunters International, [LockBit 3.0](https://attack.mitre.org/software/S1202), and [Embargo](https://attack.mitre.org/software/S1247) ransomware.(Citation: Avertium Stor...
42
Techniques
41
Covered
1
Gaps
98%
Coverage
Coverage41/42
GAPS (1)
COVERED (41)
T1003OS Credential Dumping114 det.T1003.006DCSync16 det.T1021.006Windows Remote Management22 det.T1021.007Cloud Services12 det.T1027.002Software Packing2 det.T1036.004Masquerade Task or Service7 det.T1053.005Scheduled Task100 det.T1057Process Discovery24 det.T1059.001PowerShell384 det.T1059.009Cloud API7 det.T1078.004Cloud Accounts200 det.T1082System Information Discovery91 det.T1087.002Domain Account58 det.T1087.004Cloud Account26 det.T1098.001Additional Cloud Credentials31 det.T1098.003Additional Cloud Roles60 det.T1110Brute Force100 det.T1190Exploit Public-Facing Application240 det.T1218.010Regsvr3243 det.T1218.011Rundll3278 det.T1219.002Remote Desktop Software57 det.T1482Domain Trust Discovery41 det.T1484.001Group Policy Modification19 det.T1484.002Trust Modification14 det.T1485Data Destruction100 det.T1486Data Encrypted for Impact400 det.T1490Inhibit System Recovery65 det.T1518.001Security Software Discovery11 det.T1526Cloud Service Discovery38 det.T1530Data from Cloud Storage39 det.T1537Transfer Data to Cloud Account28 det.T1552.004Private Keys23 det.T1555.005Password Managers4 det.T1555.006Cloud Secrets Management Stores10 det.T1556.009Conditional Access Policies5 det.T1567.002Exfiltration to Cloud Storage33 det.T1578.003Delete Cloud Instance1 det.T1580Cloud Infrastructure Discovery31 det.T1587.003Digital Certificates1 det.T1614.001System Language Discovery2 det.T1657Financial Theft15 det.