MITRE ATT&CKsoftware (malware)
S0640 Avaddon
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2021-08-23
Description
Avaddon is ransomware written in C++ that has been offered as Ransomware-as-a-Service (RaaS) since at least June 2020.
Related
Uses · MITRE ATT&CK (17)
- T1685 Disable or Modify Tools technique
- T1614.001 System Language Discovery sub-technique
- T1059.007 JavaScript sub-technique
- T1548.002 Bypass User Account Control sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1490 Inhibit System Recovery technique
- T1489 Service Stop technique
- T1486 Data Encrypted for Impact technique
- T1135 Network Share Discovery technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1016 System Network Configuration Discovery technique
- T1027 Obfuscated Files or Information technique
- T1047 Windows Management Instrumentation technique
- T1057 Process Discovery technique
- T1083 File and Directory Discovery technique
- T1106 Native API technique
- T1112 Modify Registry technique
References
- https://awakesecurity.com/blog/threat-hunting-for-avaddon-ransomware/ Awake Security Avaddon
- https://arxiv.org/pdf/2102.04796.pdf Arxiv Avaddon Feb 2021