ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Report
Search
Home > List all groups > List all tools > List all groups using tool Impacket

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: Impacket

NamesImpacket
CategoryTools
TypeCredential stealer, Info stealer
DescriptionImpacket is an open source collection of modules written in Python for programmatically constructing and manipulating network protocols. Impacket contains several tools for remote service execution, Kerberos manipulation, Windows credential dumping, packet sniffing, and relay attacks.
Information<https://github.com/SecureAuthCorp/impacket>
MITRE ATT&CK<https://attack.mitre.org/software/S0357/>

Last change to this tool card: 22 April 2020

Download this tool card in JSON format

All groups using tool Impacket

ChangedNameCountryObserved

APT groups

 Berserk Bear, Dragonfly 2.0Russia2015-May 2017 
 Energetic Bear, DragonflyRussia2010-Oct 2020X
 LightBasin[Unknown]2016 
XOperation GhostwriterBelarus2017-Apr 2022 HOTX
 Operation HarvestChina2016 
XRedFoxtrotChina2014-Aug 2021 
 Stone Panda, APT 10, menuPassChina2006-Feb 2022 HOTX

7 groups listed (7 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]