{"name":"APT41 — APT Atlas","versions":{"attack":"16","navigator":"5.1.0","layer":"4.5"},"domain":"enterprise-attack","description":"Techniques observed for APT41 (nation-state). Source: https://aptatlas.net/actors/apt41","filters":{"platforms":[]},"sorting":0,"layout":{"layout":"side","aggregateFunction":"average","showID":true,"showName":true},"hideDisabled":false,"techniques":[{"techniqueID":"T1001.002","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1003","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Credential Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1003.002","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1003.003","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1005","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1008","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":false},{"techniqueID":"T1012","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1014","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1016","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1018","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1021.002","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1027","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.002","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1030","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Exfiltration","enabled":true,"showSubtechniques":false},{"techniqueID":"T1033","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.004","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1036.005","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1037","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Persistence","enabled":true,"showSubtechniques":false},{"techniqueID":"T1046","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1047","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1049","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.005","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1055","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1057","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1059.003","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1059.004","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Execution","enabled":true,"showSubtechniques":true},{"techniqueID":"T1069","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.004","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1071.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1071.002","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1071.004","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1078","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1082","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1083","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1090","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":false},{"techniqueID":"T1102.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":true},{"techniqueID":"T1104","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":false},{"techniqueID":"T1105","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Command And Control","enabled":true,"showSubtechniques":false},{"techniqueID":"T1110","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Credential Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1112","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Defense Impairment","enabled":true,"showSubtechniques":false},{"techniqueID":"T1133","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Persistence","enabled":true,"showSubtechniques":false},{"techniqueID":"T1135","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Discovery","enabled":true,"showSubtechniques":false},{"techniqueID":"T1189","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1190","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1195.002","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Initial Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1197","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":false},{"techniqueID":"T1203","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Execution","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1218.011","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1480.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1486","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Impact","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.003","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1547.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Persistence","enabled":true,"showSubtechniques":true},{"techniqueID":"T1550.002","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Lateral Movement","enabled":true,"showSubtechniques":true},{"techniqueID":"T1553","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Defense Impairment","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Credential Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555.003","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Credential Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1560","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Collection","enabled":true,"showSubtechniques":false},{"techniqueID":"T1560.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Collection","enabled":true,"showSubtechniques":true},{"techniqueID":"T1566","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Initial Access","enabled":true,"showSubtechniques":false},{"techniqueID":"T1566.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Initial Access","enabled":true,"showSubtechniques":true},{"techniqueID":"T1570","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Lateral Movement","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Resource Development","enabled":true,"showSubtechniques":true},{"techniqueID":"T1583.002","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Resource Development","enabled":true,"showSubtechniques":true},{"techniqueID":"T1583.003","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Resource Development","enabled":true,"showSubtechniques":true},{"techniqueID":"T1596.005","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Reconnaissance","enabled":true,"showSubtechniques":true},{"techniqueID":"T1599","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Defense Impairment","enabled":true,"showSubtechniques":false},{"techniqueID":"T1684.001","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Stealth","enabled":true,"showSubtechniques":true},{"techniqueID":"T1685","score":1,"color":"#5ce1ff","comment":"Observed for APT41 · Defense Impairment","enabled":true,"showSubtechniques":false}],"gradient":{"colors":["#0d1230","#5ce1ff"],"minValue":0,"maxValue":1},"legendItems":[{"label":"Used by APT41","color":"#5ce1ff"}],"metadata":[{"name":"source","value":"APT Atlas"},{"name":"actor_id","value":"apt41"},{"name":"mitre_gid","value":"G0096"}]}