MITRE ATT&CKsoftware (malware)
S0576 MegaCortex
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.1
- Created
- 2021-02-17
Description
MegaCortex is ransomware that first appeared in May 2019. MegaCortex has mainly targeted industrial organizations.
Related
Uses · MITRE ATT&CK (16)
- T1685 Disable or Modify Tools technique
- T1588.003 Code Signing Certificates sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1497.001 System Checks sub-technique
- T1561.001 Disk Content Wipe sub-technique
- T1218.011 Rundll32 sub-technique
- T1055.001 Dynamic-link Library Injection sub-technique
- T1531 Account Access Removal technique
- T1490 Inhibit System Recovery technique
- T1489 Service Stop technique
- T1486 Data Encrypted for Impact technique
- T1134 Access Token Manipulation technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1083 File and Directory Discovery technique
- T1106 Native API technique
- T1112 Modify Registry technique
References
- https://www.fireeye.com/blog/threat-research/2020/07/financially-motivated-actors-are-expanding-access-into-ot.html FireEye Financial Actors Moving into OT
- https://securityintelligence.com/posts/from-mega-to-giga-cross-version-comparison-of-top-megacortex-modifications/ IBM MegaCortex
- https://www.fireeye.com/blog/threat-research/2020/02/ransomware-against-machine-learning-to-disrupt-industrial-production.html FireEye Ransomware Disrupt Industrial Production