attack.t1595.001 | Detection.FYI

Grixba Malware Reconnaissance Activity

Nov 27, 2025 · attack.reconnaissance attack.t1595.001 attack.discovery attack.t1046 detection.emerging-threats ·
Share on:

Detects execution of the Grixba reconnaissance tool based on suspicious command-line parameter combinations. This tool is used by the Play ransomware group for network enumeration, data gathering, and event log clearing.

Read More