NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)

NBTscan is an open source tool that has been used by state groups to conduct internal reconnaissance within a compromised network.^{[Debian nbtscan Nov 2019]}^{[SecTools nbtscan June 2003]}^{[Symantec Waterbug Jun 2019]}^{[FireEye APT39 Jan 2019]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Threat Group-3390 (79be2f31-5626-425e-844c-fd9c99e38fe5)	Tidal Groups	NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	1
NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	Earth Lusca (646e35d2-75de-4c1d-8ad3-616d3e155c5e)	Tidal Groups	1
Mustang Panda (4a4641b1-7686-49da-8d83-00d8013f4b47)	Tidal Groups	NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	1
Tonto Team (9f5c5672-5e7e-4440-afc8-3fdf46a1bb6c)	Tidal Groups	NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	1
Turla (47ae4fb1-fc61-4e8e-9310-66dda706e1a2)	Tidal Groups	NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	1
NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	BackdoorDiplomacy (e5b0da2b-12bc-4113-9459-9c51329c9ae0)	Tidal Groups	1
Agrius (36c70cf2-c7d5-5926-8155-5d3a63e3e55a)	Tidal Groups	NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	1
NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	GALLIUM (15ff1ce0-44f0-4f1d-a4ef-83444570e572)	Tidal Groups	1
NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	Salt Typhoon (753c7cd1-ca9f-4632-bbd2-fd55b9e70b10)	Tidal Groups	1
NBTscan (950f13e6-3ae3-411e-a2b2-4ba1afe6cb76)	Tidal Software	APT39 (a57b52c7-9f64-4ffe-a7c3-0de738fb2af1)	Tidal Groups	1