Skip to content

Hide Navigation Hide TOC

Quick Assist (Deprecated) (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3)

We are no longer maintaining this object in favor of a similar object subsequently published by MITRE: "Quick Assist" (Software). All relevant Tidal content extensions (e.g. additional Technique and Object relationships and metadata) have been added to the MITRE-authored object.

Quick Assist is a built-in Windows utility that can be used to grant external users remote access to a particular system. Financially motivated adversaries abused Quick Assist during an April 2024 campaign that in some cases led to Black Basta ransomware deployment.[Microsoft Security Blog 5 15 2024]

Cluster A Galaxy A Cluster B Galaxy B Level
Black Basta Affiliates (7f52cadb-7a12-4b9d-9290-1ef02123fbe4) Tidal Groups Quick Assist (Deprecated) (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3) Tidal Software 1
Storm-1811 (Deprecated) (ee2da206-2532-44e3-a343-d66e9bfdbca0) Tidal Groups Quick Assist (Deprecated) (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3) Tidal Software 1
CURLY SPIDER (a1a03a84-1d75-40a3-916e-d3e0d1068d11) Tidal Groups Quick Assist (Deprecated) (9c4f3f26-c391-4b2c-9dd4-e4bb9bbc5ea3) Tidal Software 1