Covenant (c9cea5ac-b426-5484-a228-6eeffa173611)
Covenant is a multi-platform command and control framework written in .NET. While designed for penetration testing and security research, the tool has also been used by threat actors such as HAFNIUM during operations. Covenant functions through a central listener managing multiple deployed "Grunts" that communicate back to the controller.[Github Covenant][Microsoft HAFNIUM March 2020]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| HAFNIUM (1bcc9382-ccfe-4b04-91f3-ef1250df5e5b) | Tidal Groups | Covenant (c9cea5ac-b426-5484-a228-6eeffa173611) | Tidal Software | 1 |