MITRE ATT&CKsoftware (malware)
S0638 Babuk
- Domain
- enterprise
- Platforms
- Windows, Linux
- Aliases
- Babyk, Vasa Locker
- Version
- 1.0
- Created
- 2021-08-11
Description
Related
Uses · MITRE ATT&CK (14)
- T1685 Disable or Modify Tools technique
- T1680 Local Storage Discovery technique
- T1059.003 Windows Command Shell sub-technique
- T1027.002 Software Packing sub-technique
- T1490 Inhibit System Recovery technique
- T1489 Service Stop technique
- T1486 Data Encrypted for Impact technique
- T1135 Network Share Discovery technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1007 System Service Discovery technique
- T1049 System Network Connections Discovery technique
- T1057 Process Discovery technique
- T1083 File and Directory Discovery technique
- T1106 Native API technique
References
- https://www.trendmicro.com/en_us/research/21/b/new-in-ransomware.html Trend Micro Ransomware February 2021
- https://www.cyberscoop.com/babuk-ransomware-serco-attack/ CyberScoop Babuk February 2021
- https://www.mcafee.com/enterprise/en-us/assets/reports/rp-babuk-ransomware.pdf McAfee Babuk February 2021
- https://www.sogeti.com/globalassets/reports/cybersecchronicles_-_babuk.pdf Sogeti CERT ESEC Babuk March 2021