schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)

schtasks is used to schedule execution of programs or scripts on a Windows system to run at a specific date and time. ^{[TechNet Schtasks]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Chimera (ca93af75-0ffa-4df4-b86a-92d4d50e496e)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
Earth Lusca (646e35d2-75de-4c1d-8ad3-616d3e155c5e)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
Rancor (021b3c71-6467-4e46-a413-8b726f066f2c)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
Lazarus Group (0bc66e95-de93-4de7-b415-4041b7191f08)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
APT29 (4c3e48b9-4426-4271-a7af-c3dfad79f447)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
APT3 (9da726e6-af02-49b8-8ebe-7ea4235513c9)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
Naikon (a80c00b2-b8b6-4780-99bb-df8fe921947d)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
BRONZE BUTLER (5825a840-5577-4ffc-a08d-3f48d64395cb)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
CACTUS Ransomware Actors (fac6fbf1-935f-4106-ad8b-c8fd8389dd38)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
BianLian Ransomware Group (a2add2a0-2b54-4623-a380-a9ad91f1f2dd)	Tidal Groups	schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	1
schtasks (2aacbf3a-a359-41d2-9a71-76447f0545b5)	Tidal Software	Kimsuky (37f317d8-02f0-43d4-8a7d-7a65ce8aadf1)	Tidal Groups	1