MITRE ATT&CKsoftware (malware)

S0606 Bad Rabbit

Published 2021-02-09 Modified 2025-01-02 Official page ↗
Domain
enterprise, ics
Platforms
Windows
Aliases
Win32/Diskcoder.D
Version
1.1
Created
2021-02-09

Description

Bad Rabbit is a self-propagating ransomware that affected the Ukrainian transportation sector in 2017. Bad Rabbit has also targeted organizations and consumers in Russia.

Related

Uses · MITRE ATT&CK (20)

  • T0817 Drive-by Compromise technique
  • T0828 Loss of Productivity and Revenue technique
  • T0863 User Execution technique
  • T0866 Exploitation of Remote Services technique
  • T0867 Lateral Tool Transfer technique
  • T1204.002 Malicious File sub-technique
  • T1569.002 Service Execution sub-technique
  • T1003.001 LSASS Memory sub-technique
  • T1110.003 Password Spraying sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1548.002 Bypass User Account Control sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1495 Firmware Corruption technique
  • T1486 Data Encrypted for Impact technique
  • T1189 Drive-by Compromise technique
  • T1210 Exploitation of Remote Services technique
  • T1135 Network Share Discovery technique
  • T1057 Process Discovery technique
  • T1106 Native API technique

Referenced by MITRE ATT&CK · uses (1)

  • G0034 Sandworm Team group

References