Forensia CTI Core

Profile

Threat Group-1314 is an unattributed threat group that has used compromised credentials to log into a victim's remote access infrastructure.

MITRE ATT&CK ↗

Techniques

4 ATT&CK techniques attributed to this actor.

T1021.002 SMB/Windows Admin Shares T1059.003 Windows Command Shell T1072 Software Deployment Tools T1078.002 Domain Accounts

Software

2 malware/tools attributed to this actor.

PsExecNet

Related corpus activity

1,368 indicators EXHIBIT techniques this actor uses. This is a shared-technique signal, not a first-party attribution to Threat Group-1314.

Indicator	Type	Family	Sev	Src
cve-2026-22584	cve	—	85	2
cve-2023-44976	cve	ransomware	85	2
cve-2025-23304	cve	—	85	2
cve-2025-0921	cve	—	85	2
cve-2026-4368	cve	ransomware	85	1
cve-2025-66478	cve	—	85	2
b0e292346b4ab3f83fadd8abcce7cfc5b9d50ef73ad141e8bc4a4689fee13504	hash	ransomware	80	2
fab69acd743f4111b749e3268690825c38822e62	hash	—	80	2
99813f3d0625e880158c68039c0e2fbf488db0be3db77cd1ce6d382644193f0e	hash	—	80	2
3d1158884fb339b3328bd330fcc27598e1f1c94bcac39e75d1a272afa4deee1a	sha256	ransomware	80	1
4c357a29b202b77e7db190d359ead2dfd3f8869c6808b96bfa8bee82525bb2a2	hash	ransomware	80	1
91e523a46f3bb860ac2e5800b7e1ec89d75a2408410b9cd25eebc17c8d7a92bc	hash	—	80	2
75635009a00cb26d2f532ad974ede59785a18e4b30132a1f585108589394ba5a	hash	ransomware	80	1
a7bd8869293212e1671df90d2d41b96d4933eb9408b1111bd830e111a91bb202	hash	phishing	80	2
ced6b0f44410f6133ad63b61e04613a8b56cc3338d7b34497540e9541163e7ec	hash	ransomware	80	1
a08d8e63b0cd3638fb40b8e6da546e26da69439597565827f9cec87915f78568	sha256	ransomware	80	1
08060143ea9b55b480746b415af22e3a	hash	ransomware	80	1
6c6cbed6aad96564ed87094785be07a1	hash	phishing	80	2
55d6238b01a177e25eb7d53c943f3abea64ec073	hash	phishing	80	2
9758e76b601798a30d903bf05052a53df80451e5c156548ce9da828f608b6470	sha256	—	80	1
221a39856b37e3c682f62427f1e6b965b36a2405764689c914672770a01a1fa9	sha256	—	80	1
61e9d76f07334843df561fe4bac449fb6fdaed5e5eb91480bded225f3d265c5f	hash	phishing	80	2
b148626849c11dd5b3230632a38a6302	hash	ransomware	80	2
a5a5b6257304eefe5212edfd8c0ad27f77357c5046a7acb8eb7ba72ed4bad9e0	hash	ransomware	80	1
24398b75be2645e6c695e529e62e60deb418143a4bbea13c561d3c361419eb54	hash	—	80	2
107b5aa3c4ef30b9b832e0a10b1efb1dcf433158bc6af8d890d66c0c9ed50d21	sha256	—	80	1
e4ccb2328c06710a7f0254cb6315e1b106396b0ff525f9cf3eada6e85d285c1c	sha256	—	80	1
6870e3bbf2447c96d21682caf943cf31c2e8c21c8cfb91a5092eab1c9e5f19ae	hash	ransomware	80	1
e5e43b0830369c39fab45363486da4d21a98c5097ea262c9816997f11c73c1c4	hash	phishing	80	2
15d1002d9935fbfc9dfc65eb70fe4ecc0943c784	hash	ransomware	80	1

Showing the top 30 by severity of 1,368.