Home / Threat actors / Rancor
Rancor G0075
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
12
Techniques
4
Malware and tools
Rancor is a threat group that has led targeted campaigns against the South East Asia region. Rancor uses politically-motivated lures to entice victims to open malicious documents.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Initial Access
T1566.001 Spearphishing Attachment Execution
T1053.005 Scheduled TaskT1059.003 Windows Command ShellT1059.005 Visual BasicT1204.002 Malicious File Persistence
T1053.005 Scheduled TaskT1546.003 Windows Management Instrumentation Event Subscription Privilege Escalation
T1053.005 Scheduled TaskT1546.003 Windows Management Instrumentation Event Subscription Stealth
T1218.007 Msiexec Command and Control
T1071.001 Web ProtocolsT1105 Ingress Tool Transfer © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.