Dark Caracal
· Published 16/12/2025 19:39 · Modified 27/03/2026 01:14
· Source: The MITRE Corporation
Essential information
- Confidence
- 100/100
- Published
- 16/12/2025 19:39
- Modified
- 27/03/2026 01:14
- Updated at
- 27/03/2026 01:14
- Revoked
- No
- Author / Source
- The MITRE Corporation
- Resource level
- —
- Primary motivation
- —
- Related entities
- 1 reports, 19 attack patterns (mitre), 5 malware, 32 indicators
Description
[Dark Caracal](https://attack.mitre.org/groups/G0070) is threat group that has been attributed to the Lebanese General Directorate of General Security (GDGS) and has operated since at least 2012. (Citation: Lookout Dark Caracal Jan 2018)
Marking (TLP)
TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
External references
Related entities
Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.
Reports (1)
-
7 MITREs 2 Malwares 41 Observables 1 APTPublished 05/03/2025 18:21 · Modified 05/03/2025 18:37
Attack patterns (MITRE) (19)
-
T1083 usesFile and Directory Discovery
-
T1566 usesPhishing
-
T1189 usesDrive-by Compromise
-
T1566.003 usesSpearphishing via Service
-
T1547.001 usesRegistry Run Keys / Startup Folder
-
T1027.002 usesSoftware Packing
-
T1071.001 usesWeb Protocols
-
T1204 usesUser Execution
-
T1059.003 usesWindows Command Shell
-
T1036 usesMasquerading
-
T1021 usesRemote Services
-
T1059 usesCommand and Scripting Interpreter
-
T1218.001 usesCompiled HTML File
-
T1204.002 usesMalicious File
-
T1560 usesArchive Collected Data
-
Web Protocols uses
-
T1113 usesScreen Capture
-
T1005 usesData from Local System
Malware (5)
Indicators (32)
-
12e849ffba407d5db756879fd257c4b736eb4b6adac6320d2f1916d6a923fa46indicates -
032ff087debc175342e01a3bb205fbd7ab2e724babcb24cc4b66f1d8df783612indicates -
05bf7db7debfeb56702ef1b421a336d8431c3f7334187d2ccd6ba34816a3fd5aindicates -
0d6822c93cb78ad0d2ad34ba9057a6c9de8784f55caa6a8d8af77fed00f0da0aindicates -
121d941ba5a6ff8d99558e0919f49b926fbcd00e3007aad14ac85e799d55473cindicates -
302c707321abc9eca4d14171a33c9c5207711d2a18acc81b31a40bb68d6bea99indicates -
0864b87a18356bbe93b2e10f1deee5d4b705fc824899d227ced25c96390b8a0dindicates -
3c099ec7363407c9fb742beca81f97ecca93807e0f4c7fe73e019a3ccedbd220indicates -
44945f3a5be8e627adcc2bf91e971b405a3c3ad22f2b219c99ffb05628895becindicates -
e5ce11d9bdc7433f713a6f7bd1c05b0a98355ad8a9995e0b5349b10c9d0df1b1indicates -
13306775fdf506b706693deccb44ec364fe04dbf3c471227c2439c2462e19080indicates -
1cd3fce0b3fa628bf174fdd4151626327eab3aa3ce0f81ecd2423c4b56b221bfindicates -
e5bc162807af900cf73a3f9a3e4cc1c5b10f774f44baa3632f4af6465c80c464indicates -
1e7d86f9ff5fd50aeeeb04040baad0ac0d84347d60e132458448096a758e9aceindicates -
57358c9f7f38a9364884cdcc4919ec3f7c71f147e4329d72867f29f1828aac4eindicates -
158255fa4a257953edf84323b4d7fef129ab55450919a66d6ce8bc9d78612230indicates -
289757c325556561c88a3918f3cc04251dc1d2fe2dbfc24acf8e635da7982853indicates -
918309457c875042e044510966083575a1635e977f1baed76b4f35815d631da1indicates -
08552f588eafceb0fa3117c99a0059fd06882a36cc162a01575926736d4a80ebindicates -
3cc284cecc3a8513d8ba664f88c1164312c049822f9deb009fd0f63dd0c22801indicates -
8a0beec469a4373a2ebb4b21f013c33e3d2c539514462df5ff88dc8df9e87b3bindicates -
a6ac2fd5dc59f5300c930b3fd5ffd6ed6e4dc27a2707e0293d521c88de027d4bindicates -
247b0725fc0935131537dd00eb454269f3dd5c8c94002448c7b3c27a9aafc75cindicates -
3fe4ac73a5c94ac392ad43bde078e27b3dcab03717e13e5515ef6fd9a2dea711indicates -
1786f16a50a4255df8aa32f2e21f2829b4f8aaba2ced3e4a7670846205b3ac70indicates -
21ff46a6fc9173fcc147d7a5c603032c662c6c1f1b05c1bb1e30e20e168bb056indicates -
c8d20ae481f17de8606b92ab3170daea423081bf854d4b6957d7f2dd114a1f6aindicates -
01e8536751080ea135c3ad7ae9187d06cdcccddfc89bc0d41ea4281eeb3e9fb4indicates -
26ee4581ec0d064a1296e8178b016249977a483fccb89dd55ab6634aac4faa0findicates -
0ffc7ae741bb90c7f8e442d89b985def9969ebf293442f751ab2e69f4df226a8indicates -
18ba3612b1f0dbd23f8ab39b2d096bab0ed3438b37932f473c787e24e57e8397indicates -
0fe11d78990590652f4d0f3afba5670e030b8ab714db9083fd0a981e0f1f48f3indicates