GroupProfiles: TheGentlemen.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
TheGentlemen's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| Advanced IP Scanner | AnyDesk | EDRStartupHinder | DumpBrowserSecrets | Impacket | Amnezia VPN | PsExec | WinSCP |
| API-C99-NL | FreeRDP | KslDump | KslKatz | NetExec | Chisel | | |
| Censys | MeshAgent | PowerRun | Mimikatz | PowerZure | Cloudflared | | |
| CertiHound | | RedSun | | RegPwn | OpenSSH | | |
| Gogo | | ThrottleStop driver (BYOVD) | | Responder | OpenVPN | | |
| MANSPIDER | | | | Titanis | Proxychains | | |
| Nmap | | | | Velociraptor | PuTTY | | |
| PrivHound | | | | ZeroPulse | Wireguard VPN | | |
| RelayKing-Depth | | | | | | | |
| Shodan | | | | | | | |
| SoftPerfect NetScan | | | | | | | |
| TaskHound | | | | | | | |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to TheGentlemen's ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 15 May 2026 | https://ransom-isac.com/blog/the-gentlemen-leak-analysis/ |
| 14 May 2026 | https://www.kelacyber.com/blog/the-gentlemen-ransomware-internal-chat-leak-analysis-2026/ |
| 13 May 2026 | https://research.checkpoint.com/2026/thus-spoke-the-gentlemen/ |
| 9 September 2025 | https://www.trendmicro.com/en_us/research/25/i/unmasking-the-gentlemen-ransomware.html |