MITRE ATT&CKsoftware (malware)

S0617 HELLOKITTY

Published 2021-06-03 Modified 2025-04-25 Official page ↗

Domain: enterprise
Platforms: Windows
Version: 1.0
Created: 2021-06-03

Description

HELLOKITTY is a ransomware written in C++ that shares similar code structure and functionality with DEATHRANSOM and FIVEHANDS. HELLOKITTY has been used since at least 2020, targets have included a Polish video game developer and a Brazilian electric power company.

Uses · MITRE ATT&CK (6)

T1680 Local Storage Discovery technique
T1490 Inhibit System Recovery technique
T1486 Data Encrypted for Impact technique
T1135 Network Share Discovery technique
T1047 Windows Management Instrumentation technique
T1057 Process Discovery technique

References

https://www.fireeye.com/blog/threat-research/2021/04/unc2447-sombrat-and-fivehands-ransomware-sophisticated-financial-threat.html FireEye FiveHands April 2021

S0617 HELLOKITTY

Description

Related

Uses · MITRE ATT&CK (6)

References