Hive Ransomware Technical Analysis and Initial Access Discovery

- SEO poisoning - teamviewer

- NSudo

- Cobalt Strike - Jquery Profile

- gpg4win

- nircmd

- Powerview

- ADFind

- Syncro MSP Remote Access

- Procdump64

- get-admin.bat

https://www.kroll.com/en/insights/publications/cyber/hive-ransomware-technical-analysis-initial-access-discovery 

*Beware click the link!