{"name":"APT27 — APT Atlas","versions":{"attack":"16","navigator":"5.1.0","layer":"4.5"},"domain":"enterprise-attack","description":"Techniques observed for APT27 (nation-state). Source: https://aptatlas.net/actors/apt27","filters":{"platforms":[]},"sorting":0,"layout":{"layout":"side","aggregateFunction":"average","showID":true,"showName":true},"hideDisabled":false,"techniques":[{"techniqueID":"T1047","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1033","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.004","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1203","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1190","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1119","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555.005","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1560.002","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Collection","enabled":true,"showSubtechniques":true},{"techniqueID":"T1021.006","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1003.001","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1005","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.005","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1566.001","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Initial Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1140","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1030","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Exfiltration","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.002","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1543.003","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1210","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Lateral Movement","enabled":true,"showSubtechniques":false},{"techniqueID":"T1112","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Defense Impairment","enabled":true,"showSubtechniques":false},{"techniqueID":"T1016","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.012","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1567.002","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Exfiltration","enabled":true,"showSubtechniques":true},{"techniqueID":"T1189","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.001","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1068","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Privilege Escalation","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.002","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1059.001","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1199","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.003","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1070.004","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1071.001","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1195.002","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Initial Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1078","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1012","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1046","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1105","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Command And Control","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.015","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1018","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1049","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.002","score":1,"color":"#5ce1ff","comment":"Observed for APT27 · Stealth","enabled":true,"showSubtechniques":true}],"gradient":{"colors":["#0d1230","#5ce1ff"],"minValue":0,"maxValue":1},"legendItems":[{"label":"Used by APT27","color":"#5ce1ff"}],"metadata":[{"name":"source","value":"APT Atlas"},{"name":"actor_id","value":"apt27"},{"name":"mitre_gid","value":"G0027"}]}