30
Groups Using This
3
Platforms
4
Prevalence Rank
0
Known Aliases
Description

Cobalt Strike is a commercial, full-featured, remote access tool that bills itself as โ€œadversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actorsโ€. Cobalt Strikeโ€™s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed within a single, integrated system. In addition to its own capabilities, Cobalt Strike leverages the capabilities of other well-known tools such as Metasploit and Mimikatz.

View MITRE record โ†—

Platforms
LinuxmacOSWindows
Groups Deploying Cobalt Strike (30)
G0129
Mustang Panda
๐Ÿ‡ท๐Ÿ‡บ Russia85 techniques23 software
G0096
APT41
๐Ÿ‡จ๐Ÿ‡ณ China82 techniques32 software
G0034
Sandworm Team
๐Ÿ‡ท๐Ÿ‡บ Russia79 techniques27 software
G0050
APT32
๐Ÿ‡ป๐Ÿ‡ณ Vietnam78 techniques15 software
G0046
FIN7
67 techniques19 software
G0016
APT29
๐Ÿ‡ท๐Ÿ‡บ Russia66 techniques49 software
G0102
Wizard Spider
๐Ÿ‡ท๐Ÿ‡บ Russia64 techniques22 software
G0114
Chimera
๐Ÿ‡จ๐Ÿ‡ณ China59 techniques6 software
G0027
Threat Group-3390
๐Ÿ‡จ๐Ÿ‡ณ China57 techniques24 software
G0065
Leviathan
๐Ÿ‡จ๐Ÿ‡ณ China50 techniques17 software
G1043
BlackByte
48 techniques8 software
G0045
menuPass
๐Ÿ‡จ๐Ÿ‡ณ China46 techniques25 software
G1006
Earth Lusca
๐Ÿ‡จ๐Ÿ‡ณ China44 techniques9 software
G1054
MirrorFace
๐Ÿ‡จ๐Ÿ‡ณ China43 techniques16 software
G1053
Storm-0501
42 techniques8 software
G0037
FIN6
40 techniques12 software
G0143
Aquatic Panda
๐Ÿ‡จ๐Ÿ‡ณ China35 techniques6 software
G0080
Cobalt Group
34 techniques6 software
G0092
TA505
34 techniques16 software
G0119
Indrik Spider
๐Ÿ‡ท๐Ÿ‡บ Russia33 techniques8 software
G1046
Storm-1811
31 techniques7 software
G0067
APT37
๐Ÿ‡ท๐Ÿ‡บ Russia29 techniques13 software
G1014
LuminousMoth
๐Ÿ‡จ๐Ÿ‡ณ China28 techniques2 software
G1040
Play
26 techniques9 software
G1022
ToddyCat
25 techniques9 software
G0073
APT19
๐Ÿ‡จ๐Ÿ‡ณ China21 techniques2 software
G1021
Cinnamon Tempest
๐Ÿ‡จ๐Ÿ‡ณ China19 techniques8 software
G1020
Mustard Tempest
12 techniques2 software
G0052
CopyKittens
๐Ÿ‡ฎ๐Ÿ‡ท Iran8 techniques4 software
G0079
DarkHydrus
7 techniques3 software
โ†‘