Rubeus (2e54f40c-ab62-535e-bbab-3f3a835ff55a)

Rubeus is a C# toolset designed for raw Kerberos interaction that has been used since at least 2020, including in ransomware operations.^{[GitHub Rubeus March 2023]}^{[FireEye KEGTAP SINGLEMALT October 2020]}^{[DFIR Ryuk's Return October 2020]}^{[DFIR Ryuk 2 Hour Speed Run November 2020]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
BlackCat Ransomware Actors & Affiliates (33159d02-a1ce-49ec-a381-60b069db66f7)	Tidal Groups	Rubeus (2e54f40c-ab62-535e-bbab-3f3a835ff55a)	Tidal Software	1
APT29 (4c3e48b9-4426-4271-a7af-c3dfad79f447)	Tidal Groups	Rubeus (2e54f40c-ab62-535e-bbab-3f3a835ff55a)	Tidal Software	1
Wizard Spider (0b431229-036f-4157-a1da-ff16dfc095f8)	Tidal Groups	Rubeus (2e54f40c-ab62-535e-bbab-3f3a835ff55a)	Tidal Software	1
BlackSuit Ransomware Actors (1d751794-ce94-4936-bf45-4ab86d0e3b6e)	Tidal Groups	Rubeus (2e54f40c-ab62-535e-bbab-3f3a835ff55a)	Tidal Software	1
Storm-0844 (fcbf6963-839b-4853-8b80-73ff6831b7d7)	Tidal Groups	Rubeus (2e54f40c-ab62-535e-bbab-3f3a835ff55a)	Tidal Software	1