Create Beast.md

BushidoUK · web-flow · commit c9ede739266d · 2026-03-17T22:01:27.000Z
diff --git a/GroupProfiles/Beast.md b/GroupProfiles/Beast.md
@@ -0,0 +1,17 @@
+# Beast's Tools
+
+| Discovery            | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
+|----------------------|-----------|-----------------|------------------|--------|------------|--------|--------------|
+| Advanced IP Scanner  | AnyDesk   |                 | Automim          |        | Klink      | PsExec | MEGA         |
+| Advanced Port Scanner |           |                 | LaZagne          |        | OpenSSH    |        | WinSCP       |
+| Everything.exe       |           |                 | Mimikatz         |        |            |        |              |
+| SoftPerfect NetScan  |           |                 |                  |        |            |        |              |
+
+> [!NOTE]
+> This is the list of tools that have been observed during various intrusions that lead to Beast ransomware deployment.
+
+#### Sources
+
+| Date Published | Report        |
+|----------------|---------------|
+| TBD March 2026 | [placeholder] |
