Skip to content

Hide Navigation Hide TOC

Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc)

The Net utility is a component of the Windows operating system. It is used in command-line operations for control of users, groups, services, and network connections. [Microsoft Net Utility]

Net has a great deal of functionality, [Savill 1999] much of which is useful for an adversary, such as gathering system and network information for Discovery, moving laterally through SMB/Windows Admin Shares using net use commands, and interacting with services. The net1.exe utility is executed for certain functionality when net.exe is run and can be used directly in commands such as net1 user.

Cluster A Galaxy A Cluster B Galaxy B Level
APT32 (c0fe9859-e8de-4ce1-bc3c-b489e914a145) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Ke3chang (26c0925f-1a3c-4df6-b27a-62b9731299b8) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software APT33 (99bbbe25-45af-492f-a7ff-7cbc57828bac) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Deep Panda (43f826a1-e8c8-47b8-9b00-38e1b3e4293b) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Threat Group-1314 (0f86e871-0c6c-4227-ae28-3f3696d6ae9d) Tidal Groups 1
APT38 (dfbce236-735c-436d-b433-933bd6eae17b) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Dragonfly (472080b0-e3d4-4546-9272-c4359fe856e1) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Threat Group-3390 (79be2f31-5626-425e-844c-fd9c99e38fe5) Tidal Groups 1
Quantum Ransomware Actors (e75a1b98-be68-467f-a8df-bcb7671543b3) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software APT41 (502223ee-8947-42f8-a532-a3b3da12b7d9) Tidal Groups 1
ToddyCat (0f41da7d-1e47-58fe-ba6e-ee658a985e1b) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Rhysida Ransomware Actors (0610cd57-2511-467a-97e3-3c810384074f) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software APT5 (f46d6ee9-9d1d-586a-9f2d-6bff8fb92910) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Leviathan (eadd78e3-3b5d-430a-b994-4360b172c871) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Turla (47ae4fb1-fc61-4e8e-9310-66dda706e1a2) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software BianLian Ransomware Group (a2add2a0-2b54-4623-a380-a9ad91f1f2dd) Tidal Groups 1
Magic Hound (7a9d653c-8812-4b96-81d1-b0a27ca918b4) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Sandworm Team (16a65ee9-cd60-4f04-ba34-f2f45fcfc666) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software UNC961 (e47b2958-b7c4-4fe1-a006-03137db91963) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software menuPass (fb93231d-2ae4-45da-9dea-4c372a11f322) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Volatile Cedar (7c3ef21c-0e1c-43d5-afb0-3a07c5a66937) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Volt Typhoon (4ea1245f-3f35-5168-bd10-1fc49142fd4e) Tidal Groups 1
Volt Typhoon - Tidal (3290dcb9-5781-4b87-8fa0-6ae820e152cd) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
FIN8 (b3061284-0335-4dcb-9f8e-a3b0412fd46f) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software BRONZE BUTLER (5825a840-5577-4ffc-a08d-3f48d64395cb) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software admin@338 (8567136b-f84a-45ed-8cce-46324c7da60e) Tidal Groups 1
GALLIUM (15ff1ce0-44f0-4f1d-a4ef-83444570e572) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Akira (923f478c-7ad1-516f-986d-61f96b9c553e) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Chimera (ca93af75-0ffa-4df4-b86a-92d4d50e496e) Tidal Groups 1
Akira Ransomware Actors (Deprecated) (0fcb2205-e75b-46c9-ac54-00f218d5e331) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Wizard Spider (0b431229-036f-4157-a1da-ff16dfc095f8) Tidal Groups 1
Naikon (a80c00b2-b8b6-4780-99bb-df8fe921947d) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software APT1 (5307bba1-2674-4fbd-bfd5-1db1ae06fc5f) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software OilRig (d01abdb1-0378-4654-aa38-1a4a292703e2) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software Orangeworm (863b7013-133d-4a82-93d2-51b53a8fd30e) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software TA505 (b3220638-6682-4a4e-ab64-e7dc4202a3f1) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software APT28 (5b1a5b9e-4722-41fc-a15d-196a549e3ac5) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software INC Ransom (8957f42d-a069-542b-bce6-3059a2fa0f2e) Tidal Groups 1
Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software APT29 (4c3e48b9-4426-4271-a7af-c3dfad79f447) Tidal Groups 1
INC Ransomware Actors (Deprecated) (2cc28cf9-d030-4609-acdc-0b0429580bb4) Tidal Groups Net (c9b8522f-126d-40ff-b44e-1f46098bd8cc) Tidal Software 1