Rancor
- ID
- G0075
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Rancor is a threat group that has led targeted campaigns against the South East Asia region. Rancor uses politically-motivated lures to entice victims to open malicious documents. [1]
Techniques used (9)
- T1053.005 Scheduled Task
- T1059.003 Windows Command Shell
- T1059.005 Visual Basic
- T1071.001 Web Protocols
- T1105 Ingress Tool Transfer
- T1204.002 Malicious File
- T1218.007 Msiexec
- T1546.003 Windows Management Instrumentation Event Subscription
- T1566.001 Spearphishing Attachment