BloodHound — Malware Profile

BloodHound is an Active Directory (AD) reconnaissance tool that can reveal hidden relationships and identify attack paths within an AD environment.

MITRE ATT&CK techniques (11)

• T1018 Remote System Discovery
• T1033 System Owner/User Discovery
• T1059.001 PowerShell
• T1069.001 Local Groups
• T1069.002 Domain Groups
• T1087.001 Local Account
• T1087.002 Domain Account
• T1106 Native API
• T1482 Domain Trust Discovery
• T1560 Archive Collected Data
• T1615 Group Policy Discovery

Attributed threat actors

• Play Ransomware
• APT29
• TA505
• Ember Bear
• Conti
• Chimera

Read the full analysis on IntelFusions