MITRE ATT&CKsoftware (malware)
S0242 SynAck
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.3
- Created
- 2018-10-17
Description
SynAck is variant of Trojan ransomware targeting mainly English-speaking users since at least fall 2017.
Related
Uses · MITRE ATT&CK (14)
- T1685.005 Clear Windows Event Logs sub-technique
- T1614.001 System Language Discovery sub-technique
- T1497.001 System Checks sub-technique
- T1055.013 Process Doppelgänging sub-technique
- T1486 Data Encrypted for Impact technique
- T1007 System Service Discovery technique
- T1012 Query Registry technique
- T1027 Obfuscated Files or Information technique
- T1033 System Owner/User Discovery technique
- T1057 Process Discovery technique
- T1082 System Information Discovery technique
- T1083 File and Directory Discovery technique
- T1106 Native API technique
- T1112 Modify Registry technique
References
- https://securelist.com/synack-targeted-ransomware-uses-the-doppelganging-technique/85431/ SecureList SynAck Doppelgänging May 2018
- https://usa.kaspersky.com/about/press-releases/2018_synack-doppelganging Kaspersky Lab SynAck May 2018