{"name":"APT40 — APT Atlas","versions":{"attack":"16","navigator":"5.1.0","layer":"4.5"},"domain":"enterprise-attack","description":"Techniques observed for APT40 (nation-state). Source: https://aptatlas.net/actors/apt40","filters":{"platforms":[]},"sorting":0,"layout":{"layout":"side","aggregateFunction":"average","showID":true,"showName":true},"hideDisabled":false,"techniques":[{"techniqueID":"T1003","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Credential Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.001","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1021.001","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1021.004","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1027.003","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1027.015","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1041","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Exfiltration","enabled":true,"showSubtechniques":false},{"techniqueID":"T1047","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.001","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1059.001","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1059.005","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1078","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1090.003","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1102.003","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1105","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Command And Control","enabled":true,"showSubtechniques":false},{"techniqueID":"T1140","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1189","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1190","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1197","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1203","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1204.001","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1218.010","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1534","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Lateral Movement","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.001","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1547.009","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1560","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1566.001","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Initial Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1566.002","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Initial Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1567.002","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Exfiltration","enabled":true,"showSubtechniques":true},{"techniqueID":"T1589.001","score":1,"color":"#5ce1ff","comment":"Observed for APT40 · Reconnaissance","enabled":true,"showSubtechniques":true}],"gradient":{"colors":["#0d1230","#5ce1ff"],"minValue":0,"maxValue":1},"legendItems":[{"label":"Used by APT40","color":"#5ce1ff"}],"metadata":[{"name":"source","value":"APT Atlas"},{"name":"actor_id","value":"apt40"}]}