SharpExfiltrate (20e472dd-dc65-40e4-b655-c8b4fae7714a)
According to its GitHub project page, SharpExfiltrate is a "modular C# framework to exfiltrate loot over secure and trusted channels".[GitHub Flangvik SharpExfiltrate]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Royal Ransomware Actors (86b97a39-49c3-431e-bcc8-f4e13dbfcdf5) | Tidal Groups | SharpExfiltrate (20e472dd-dc65-40e4-b655-c8b4fae7714a) | Tidal Software | 1 |