MITRE ATT&CKsoftware (malware)
S1058 Prestige
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2023-01-20
Description
Prestige ransomware has been used by Sandworm Team since at least March 2022, including against transportation and related logistics industries in Ukraine and Poland in October 2022.
Related
Uses · MITRE ATT&CK (9)
- T1484.001 Group Policy Modification sub-technique
- T1059.001 PowerShell sub-technique
- T1053.005 Scheduled Task sub-technique
- T1490 Inhibit System Recovery technique
- T1489 Service Stop technique
- T1486 Data Encrypted for Impact technique
- T1083 File and Directory Discovery technique
- T1106 Native API technique
- T1112 Modify Registry technique
Referenced by MITRE ATT&CK · uses (1)
- G0034 Sandworm Team group
References
- https://www.microsoft.com/en-us/security/blog/2022/10/14/new-prestige-ransomware-impacts-organizations-in-ukraine-and-poland/ Microsoft Prestige ransomware October 2022