Skip to content

Hide Navigation Hide TOC

PingCastle (1debf242-3c91-4bdb-932c-27d61fe17474)

PingCastle is a tool that can be used to enumerate Active Directory and map trust relationships. BianLian Ransomware Group actors have used the tool for discovery purposes during attacks.[U.S. CISA BianLian Ransomware May 2023]

Cluster A Galaxy A Cluster B Galaxy B Level
FIN12 (6d6ed42c-760c-4964-a81e-1d4df06a8800) Tidal Groups PingCastle (1debf242-3c91-4bdb-932c-27d61fe17474) Tidal Software 1
BianLian Ransomware Group (a2add2a0-2b54-4623-a380-a9ad91f1f2dd) Tidal Groups PingCastle (1debf242-3c91-4bdb-932c-27d61fe17474) Tidal Software 1
Scattered Spider (3d77fb6c-cfb4-5563-b0be-7aa1ad535337) Tidal Groups PingCastle (1debf242-3c91-4bdb-932c-27d61fe17474) Tidal Software 1