Ladon 911 (2a760071-4fed-4df8-b7e9-fa7b606702ff)
A multifunctional scanning and exploitation tool, often used by Ghost actors with the MS17010 option to scan for SMB vulnerabilities associated with CVE-2017-0143 and CVE-2017-0144.[U.S. CISA Ghost Cring Ransomware February 19 2025]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Ladon 911 (2a760071-4fed-4df8-b7e9-fa7b606702ff) | Tidal Software | Ghost Ransomware Actors (9dc09b70-b1c0-45d1-94a8-490943c69166) | Tidal Groups | 1 |